Joomla JSP Store Locator 2.2 SQL Injection

Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/jsplocatio...

Joomla JSP Store Locator 2.2 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy:...

Joomla! Component JSP Store Locator 2.2 - id SQL Injection

Joomla! Component JSP Store Locator 2.2 - id SQL Injection Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy:...

Joomla! Component JSP Store Locator 2.2 - 'id' SQL Injection

Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/jsplocatio...

OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)

It was discovered that the Networking component of OpenJDK failed to properly parse user info from the URL. A remote attacker could cause a Java application to incorrectly parse an attacker supplied URL and interpret it differently from other applications processing the same URL...

OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)

It was discovered that the Networking component of OpenJDK failed to properly parse user info from the URL. A remote attacker could cause a Java application to incorrectly parse an attacker supplied URL and interpret it differently from other applications processing the same URL...

Joomla Store Locator 2.3.1.0 Cross Site Scripting

Exploit Title: Joomla Component Store Locator 2.3.1.0 - Cross-site scripting Date: 2017-1-28 Home : https://extensions.joomla.org/extension/store-locator/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel ...

Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection

Type user access: admins user. $GET‘id’ is not escaped. Is accessible for only admins user. PoC 1 - logged with admin user; 2 - send resquest get; http://www.example.com/wp-admin/admin.php?page=xtreme-locator-settings=0+UNION+ALL+SELECT+1%2Cslug%2Cname%2C4%2C5+FROM+wpterms+WHERE+termid%3D1...

Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection

Type user access: admins user. $GET‘id’ is not escaped. Is accessible for only admins user. 1 - logged with admin user; 2 - send resquest get; http://www.example.com/wp-admin/admin.php?page=xtreme-locator-settings&id=0+UNION+ALL+SELECT+1%2Cslug%2Cname%2C4%2C5+FROM+wpterms+WHERE+termid%3D1...

WordPress Xtreme Locator Plugin <= 1.5 - SQL Injection

This plugin is prone to an SQL injection vulnerability, because $GET‘id’ is not escaped. Solution Update the plugin...

WordPress Xtreme Locator Plugin <= 1.5 - SQL Injection

This plugin is prone to an SQL injection vulnerability, because $GET‘id’ is not escaped. Solution Update the plugin...

tallysolutions.com XSS vulnerability

Vulnerable URL: http://www.tallysolutions.com/website/html/partner-new/locate-partner.php?searchEvent="-alertOPENBUGBOUNTY-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30366 VI...

Unspecified Cross-Site Scripting Vulnerability in TYPO3 Store Locator Extension

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. An unspecified cross-site scripting vulnerability exists in TYPO3 Store Locator Extension. Because the program fails to adequately filter user-supplied data, an attacker could exploit the...

Zenly Locator - Realtime GPS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Zenly Locator - Realtime GPS published at the 'play' market has multiple vulnerabilities...

WordPress Store Locator Plus Plugin <= 4.5.10 - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

MasterCard PayPass Locator - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MasterCard PayPass Locator published at the 'play' market has multiple vulnerabilities...

WordPress Store Locator Plus 4.5.09 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Store Locator Plus for WordPress ------------------------------------------------------------------------ Yorick Koster, July 2016...

Google Chrome DevTools Access Restriction Vulnerability (CNVD-2016-06146)

Google Chrome is a web browsing tool developed by Google. Google Chrome has a security vulnerability. Due to incorrect handling of the hostname of a script path, it allows remote attackers to bypass intended access restrictions via URLs. Unlike CVE-2016-5143...

Store Locator Plus for WordPress <= 4.5.10 - Authenticated Cross-Site Scripting (XSS)

The Store Locator Plus® for WordPress WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

truedentaldiscounts.com XSS vulnerability

Vulnerable URL: http://www.truedentaldiscounts.com/tddsearch/storelocatorresults.php?lat=39.2046386=-77.2290193=20876=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E0=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS...