CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Streaming Integration allows OS Command Injection.This issue affects VideoWhisper Live Streaming Integration: from n/a through 5.5.15.
Explanation of Vulnerability in Simple Terms
VideoWhisper Live Streaming Integration versions up to 5.5.15 contain an OS command injection vulnerability. An attacker on the network can execute arbitrary system commands on the server without authentication or user interaction. The vulnerability affects confidentiality, integrity, and availability of the entire system. Update to a version newer than 5.5.15 immediately.
What an attacker can do
Execute arbitrary system commands on the server and take full control of the site.
Potential impact on your site
Complete server compromise: attacker can read files, modify content, delete data, or install malware.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
