Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1908. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This is a detailed advisory describing multiple vulnerabilities in VideoWhisper Live Streaming Integration, including arbitrary file upload, XSS, and path traversal. It provides PoC examples for exploitation but does not contain executable exploit code.
Description
The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Exploits (1)
This is a detailed advisory describing multiple vulnerabilities in VideoWhisper Live Streaming Integration, including arbitrary file upload, XSS, and path traversal. It provides PoC examples for exploitation but does not contain executable exploit code.