Extension WordPress
Vulnérabilités Webcam Video Conference
Cette page rassemble les failles publiées pour Webcam Video Conference, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Webcam Video Conference
3 fiches
Webcam Video Conference <= 4.91.8 – Unrestricted File Upload leading to Remote Code Execuction
The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different…
*-4.91.8
4.91.9
29/03/2015
Webcam Video Conference <= 3.1 – Cross-Site Scripting
The Webcam Video Conference plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-3.1
4.51
23/08/2013
Webcam Video Conference < 4.51 – Arbitrary File Upload
The Webcam Video Conference plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the vw_upload.php file in versions before 4.51. This makes it possible for attackers to upload arbitrary files on…
[*, 4.51)
4.51
12/06/2012
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.