41 matches found
Cross site scripting
XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=XSS&y=XSS to coreframe/app/core/map.php...
cargomarketing.com XSS vulnerability
Open Bug Bounty ID: OBB-673805 Description| Value ---|--- Affected Website:| cargomarketing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tambaroora.com XSS vulnerability
Open Bug Bounty ID: OBB-600171 Description| Value ---|--- Affected Website:| tambaroora.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sdm.scad.edu XSS vulnerability
Vulnerable URL: https://sdm.scad.edu/intranet/students/map.php?quarter=Spring%202017=309=1"...
advantagebasketball.com XSS vulnerability
Open Bug Bounty ID: OBB-255467 Description| Value ---|--- Affected Website:| advantagebasketball.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
classifieds.dnj.com XSS vulnerability
Vulnerable URL: http://classifieds.dnj.com/map.php?place=Garage+Sales=1/-///'/"//--...
classifieds.app.com XSS vulnerability
Vulnerable URL: http://classifieds.app.com/map.php?place=Garage+Sales=1/-///'/"//--...
n-shigoto.com XSS vulnerability
Vulnerable URL: http://www.n-shigoto.com/map.php?id=566"%27--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check n-shigoto.com...
wuzhicms \coreframe\app\content\map.php variable cityname SQL injection
No description provided by source...
nuigalway.ie XSS vulnerability
Vulnerable URL: http://www.nuigalway.ie/generic/map/map.php?pageTitle=...
Count Per Day <= 3.1 - map.php map Parameter XSS
The Count per Day WordPress plugin was affected by a map.php map Parameter XSS security vulnerability...
WordPress Eco-Annu SQL Injection
Exploit Title: Wordpress Eco-annu Plugin SQL Injection Vulnerability Google Dork: inurl:"/eco-annu/map.php?eid=" Exploit Author: Ashiyane Digital Security Team Tested on: Windows 7 Location: http://site.com/wp-content/plugins/eco-annu/map.php?eid=SQL Demo :...
CVE-2012-0895
Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...
CVE-2012-0895
The CVE-2012-0895 issue affects the WordPress Count Per Day plugin; XSS vulnerability in map/map.php can be triggered via the map parameter and is present in versions before 3.1.1. Remediation: upgrade to version 3.1.1 or later. If upgrading is not possible, apply vendor advisories/workarounds fr...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in charmap.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the 1 height or 2 width parameter...
Sql injection
Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attackers to execute arbitrary SQL commands via the hotelid parameter to 1 hotel.php, 2 details.php, 3 roomtypes.php, 4 photos.php, 5 map.php, 6 weather.php, 7 reviews.php, and 8 book.p...
LiveZilla "map.php"跨站脚本漏洞
CVE ID：CVE-2009-4450 LiveZilla是一款在线客服与客户地理位置跟踪系统。 LiveZilla包含的'Map.php'脚本不正确过滤用户输入，远程攻击者可以通过提交恶意脚本代码作为"lat", "lng"和"zom"参数数据，诱使用户解析，可导致在目标用户浏览器上执行恶意脚本代码，获得敏感信息。 GmbH LiveZilla 3.1.8.3 目前没有解决方案提供： http://www.livezilla.net/home/en/...
LiveZilla v3.1.8.3 XSS Vulnerability
No description provided by source. Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits:...
CVE-2009-4450
Multiple cross-site scripting XSS vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lat, 2 lng, and 3 zom parameters, which are not properly handled when processed with templates/map.tpl...