Google Maps Plugin Cross-Site Scripting Vulnerability in Joomla!

Joomla! Google Maps is a Joomla! module or component that displays Google Maps on one or more content pages. A cross-site scripting vulnerability in the Joomla! Google Maps plugin allows remote attackers to inject arbitrary web script or HTML via xmlns parameters...

PT-2017-5752 · Joomla · Joomla! Googlemaps Plugin

Name of the Vulnerable Software and Affected Versions: Joomla! Googlemaps plugin versions prior to 3.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter. This could potentially lead to unauthorized actions on the...

Web-based OSINT and Active Reconnaissance Suite: D0xk1t

Active reconnaissance, information gathering and OSINT built in a portable web application. D0xk1t is an open-source , self-hosted and easy to use OSINT and active reconnaissance web application for penetration testers. Based off of the prior command-line script, D0xk1t is now fully capable of...

Google Map Store Locator by Matamko,4.0,SQL Injection

Google Map Store Locator by Matamko, 4.0, SQL Injection...

Location Map - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-026

This module enables you to display one simple location map via Google Maps. The module doesn't sufficiently sanitize user input in the configuration text fields of the module allows any tags and does not respect text format configuration. This vulnerability is mitigated by the fact that an attack...

mycollingwood.ca XSS vulnerability

Open Bug Bounty ID: OBB-203457 Description| Value ---|--- Affected Website:| mycollingwood.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fedora Update for trytond-google-maps FEDORA-2016-d961441913

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Google Maps Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Google Maps is one of the map plug-ins. A cross-site request forgery vulnerability exists in the admin.jsp pag...

WordPress Google Maps 6.3.14 Cross Site Request Forgery Vulnerability

WordPress Google Maps plugin version 6.3.14 suffers from a cross site request forgery vulnerability. ------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF...

WordPress Google Maps 6.3.14 Cross Site Request Forgery

------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WP Google Maps <= 6.3.14 - Authenticated Stored Cross-Site Scripting (XSS) via CSRF

The WP Google Maps WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS via CSRF security vulnerability...

les-mathematiques.net XSS vulnerability

Vulnerable URL: http://www.les-mathematiques.net/phorum/mods/googlemaps/maptool/mapframe.php?apikey="...

[SECURITY] Fedora 25 Update: trytond-google-maps-4.0.2-1.fc25

google-maps module for Tryton application server...

Cry Ransomware Using UDP, Imgur, Google Maps

Ransomware purporting to come from a phony government agency, something called the Central Security Treatment Organization, has been making the rounds, researchers say. The ransomware, which is already known by a number of names including Cry, CSTO ransomware, or Central Security Treatment...

WordPress plugin Google Maps 'id' parameter cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Google Maps 'id' parameter due to the...

WordPress Google Maps 2.1.2 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Google Maps WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...

Google Maps <= 2.1.3 - Authenticated Reflected Cross-Site Scripting (XSS)

The google-maps WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Google Maps Plugin <= 2 2.1.3 - Cross Site Scripting (XSS)

Because of this vulnerability, the attackers can steal users' session tokens, or perform arbitrary actions on their behalf. Solution Update the plugin...

Ian Dunn: [Not just a server configuration issue] Full Path Disclosure

Hey, I've just found a 'full path disclosure' in basic-google-maps-placemarks, so it's not just a server configuration issue! I've tested it on different servers including windows, ubuntu, CentOS etc.. PoC So, if we visit wp-content/plugins/basic-google-maps-placemarks/unit-tests.php it is clearl...

Ian Dunn: CSRF in changing settings of Basic Google Maps Placemarks

Hey, this is Ahsan Tahir! I was just pentesting Basic Google Maps Placemarks in Wordpress, I found a CSRF Cross-Site Request Forgery So, by exploiting this CSRF issue, an attacker can edit the settings e.g Map Width, Map Height, Map Center Address etc.. PoC There is not CSRF token/Authentication...