WordPress Easy2Map plugin path traversal vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site. easy2Map is one of the support to create a customized Google Maps plugin. A path traversal vulnerability exists in...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

CVE-2015-7668

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

CVE-2015-7669

Multiple directory traversal vulnerabilities in 1 includes/MapImportCSV2.php and 2 includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."...

Directory traversal

Multiple directory traversal vulnerabilities in 1 includes/MapImportCSV2.php and 2 includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."...

CVE-2015-7668

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

CVE-2015-7669

The CVE-2015-7669 entry affects the WordPress Easy2Map plugin prior to version 1.3.0. The vulnerability is a directory traversal / Local File Inclusion issue in the includes/MapImportCSV2.php and includes/MapImportCSV.php scripts, allowing remote attackers to supply a csvfile parameter via the up...

CVE-2015-7668

The CVE-2015-7668 entry concerns the WordPress Easy2Map plugin (pre-1.3.0). A Cross-site Scripting (XSS) flaw exists in includes/MapPinImageSave.php that allows an attacker to inject arbitrary web script/HTML via the map_id parameter. Affected version: Easy2Map

Cross-site scripting vulnerability in wordpress plugin easy2map-photos

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Wordpress plugin easy2map-photos has an xss vulnerability due to imprope...

WP 插件 Easy2Map Photos 1.0.9 SQL注入漏洞

No description provided by source...

A Reflected XSS in Easy2Map version 1.2.9 WordPress plugin

Vulnerability title: A Reflected XSS in Easy2Map version 1.2.9 WordPress plugin CVE: CVE-2015-7668 Vendor: Steven Ellis Product: Easy2Map Affected version: 1.2.9 Fixed version: 1.3.0 Reported by: Iberia Medeiros Vulnerability Details: ===================== It was discovered that no protection...

Multiple Path/Directory Traversal and/or Local File Inclusion in Easy2Map version 1.2.9 WordPress plugin

Vulnerability title: Multiple Path/Directory Traversal and/or Local File Inclusion in Easy2Map version 1.2.9 WordPress plugin CVE: CVE-2015-7669 Vendor: Steven Ellis Product: Easy2Map Affected version: 1.2.9 Fixed version: 1.3.0 Reported by: Iberia Medeiros Vulnerability Details:...

WordPress Easy2Map 1.2.9 Local File Inclusion / Directory Traversal

Vulnerability title: Multiple Path/Directory Traversal and/or Local File Inclusion in Easy2Map version 1.2.9 WordPress plugin CVE: CVE-2015-7669 Vendor: Steven Ellis Product: Easy2Map Affected version: 1.2.9 Fixed version: 1.3.0 Reported by: Ibéria Medeiros Vulnerability Details:...

WordPress Easy2Map 1.2.9 Cross Site Scripting

Vulnerability title: A Reflected XSS in Easy2Map version 1.2.9 WordPress plugin CVE: CVE-2015-7668 Vendor: Steven Ellis Product: Easy2Map Affected version: 1.2.9 Fixed version: 1.3.0 Reported by: Ibéria Medeiros Vulnerability Details: ===================== It was discovered that no protection...

WordPress Easy2Map 1.2.9 Vulnerabilities

Exploit for php platform in category web applications Vulnerability title: Multiple Path/Directory Traversal and/or Local File Inclusion in Easy2Map version 1.2.9 WordPress plugin CVE: CVE-2015-7669 Vendor: Steven Ellis Product: Easy2Map Affected version: 1.2.9 Fixed version: 1.3.0 Reported by:...

Easy2Map <= 1.2.9 - Reflected Cross-Site Scripting (XSS)

The Easy2Map WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Easy2Map <= 1.2.9 - Local File Inclusion

The Easy2Map WordPress plugin was affected by a Local File Inclusion security vulnerability...

WordPress Easy2Map Photos Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases.Easy2Map Photos is a tool for generating geotagged photo galleries. A SQL injection vulnerability exists in the WordPress Easy2Map Photo...

WordPress Easy2Map Photos Plugin Directory Traversal Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases.Easy2Map Photos is a tool for generating geotagged photo galleries. A directory traversal vulnerability exists in the WordPress Easy2Map...

SQL Injection in easy2map wordpress plugin v1.24

Title: SQL Injection in easy2map wordpress plugin v1.24 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-08 Download Site: https://wordpress.org/plugins/easy2map Vendor: Steven Ellis Vendor Notified: 2015-06-08, fixed in v1.25 Vendor Contact: https://profiles.wordpress.org/stevenellis/ Advisory...