CVE-2015-4617

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory...

CVE-2015-4617

CVE-2015-4617 affects the WordPress plugin Easy2map-photos (v1.0.9) and concerns path traversal in MapPinImageUpload.php and MapPinIconSave.php, allowing files to be created outside the upload directory. The issue is triggered via file-name handling and is not due to a missing authentication vect...

CVE-2015-4617: Improper Limitation of a Pathname to a Restricted Directory

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory...

CVE-2015-4615: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables...

PT-2019-7187

Name of the Vulnerable Software and Affected Versions Easy2map-photos WordPress Plugin version 1.09 Description The issue allows SQL Injection due to unsanitized variables, including mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML, and mapID. Recommendation...

PT-2019-7188

Name of the Vulnerable Software and Affected Versions Easy2map-photos WordPress Plugin version 1.09 Description The issue allows path traversal when specifying file names, enabling the creation of files outside of the upload directory. This is due to a vulnerability in the MapPinImageUpload.php a...

WordPress Easy2Map plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site. easy2Map is one of the support to create a customized Google Maps plugin. A cross-site scripting vulnerability...

WordPress Easy2Map plugin path traversal vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site. easy2Map is one of the support to create a customized Google Maps plugin. A path traversal vulnerability exists in...

Directory traversal

Multiple directory traversal vulnerabilities in 1 includes/MapImportCSV2.php and 2 includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."...

CVE-2015-7668

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

CVE-2015-7669

Multiple directory traversal vulnerabilities in 1 includes/MapImportCSV2.php and 2 includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

CVE-2015-7669

The CVE-2015-7669 entry affects the WordPress Easy2Map plugin prior to version 1.3.0. The vulnerability is a directory traversal / Local File Inclusion issue in the includes/MapImportCSV2.php and includes/MapImportCSV.php scripts, allowing remote attackers to supply a csvfile parameter via the up...

CVE-2015-7668

The CVE-2015-7668 entry concerns the WordPress Easy2Map plugin (pre-1.3.0). A Cross-site Scripting (XSS) flaw exists in includes/MapPinImageSave.php that allows an attacker to inject arbitrary web script/HTML via the map_id parameter. Affected version: Easy2Map

CVE-2015-7668

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

CVE-2015-7668

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

CVE-2015-7669

Multiple directory traversal vulnerabilities in 1 includes/MapImportCSV2.php and 2 includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."...

PT-2017-7255

Name of the Vulnerable Software and Affected Versions Easy2Map plugin versions prior to 1.3.0 Description The issue concerns directory traversal vulnerabilities in the Easy2Map plugin for WordPress. Specifically, the vulnerabilities are located in the includes/MapImportCSV2.php and...

PT-2017-7254

Name of the Vulnerable Software and Affected Versions Easy2Map plugin versions prior to 1.3.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the map id parameter in the includes/MapPinImageSave.ph...

CVE-2015-7669: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in 1 includes/MapImportCSV2.php and 2 includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."...