Google Maps Ready! 1.1.5 - CSRF & XSS

The google-maps-ready WordPress plugin was affected by a CSRF & XSS security vulnerability...

WordPress Google Maps Ready! Plugin - 1.1.5 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

CVE-2014-6239

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6239

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6239

The CVE-2014-6239 issue affects the TYPO3 extension Address visualization with Google Maps (st_address_map). The vulnerability is a SQL injection in st_address_map prior to version 0.3.6 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The TYPO3 security bul...

CSRF, XSS Vulnerabilities Afflict Wordpress Plugins

A smattering of bugs, mostly cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities, have been plaguing at least eight different WordPress plugins as of late. A security researcher going by the pseudonym Voxel@Night published on Monday information regarding the...

Basic Google Maps Placemarks 1.10.2 - settings.php Multiple Fields Stored XSS Weakness

The Basic Google Maps Placemarks WordPress plugin was affected by a settings.php Multiple Fields Stored XSS Weakness security vulnerability...

Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin was affected by a Two SQL Injection Vulnerabilities security vulnerability...

Google Maps via Store Locator - Multiple Vulnerabilities

The Store Locator Plus® for WordPress WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress Basic Google Maps Placemarks Plugin <= 1.10.2 - XSS

This plugin is prone to a settings.php multiple fields stored XSS weakness. Solution Upgrade this plugin...

Wordpress Google Maps via Store Locator Plugin 2.7.1 - 3.0.1 - Multiple Vulnerabilities

No description provided by source. Description : Wordpress Plugins - Google Maps via Store Locator Plus Multiple Vulnerability Version : 2.7.1 - 3.0.1 Link : http://wordpress.org/extend/plugins/store-locator-le/ Plugins : http://downloads.wordpress.org/plugin/store-locator-le.3.0.1.zip Date :...

Multiple vulnerabilities in JoomLeague for Joomla

Hello 3APA3A! These are Denial of Service, XML Injection, Cross-Site Scripting, Full path disclosure and Insufficient Anti-automation vulnerabilities in JoomLeague plugin for Joomla. These vulnerabilities are in Google Maps plugin for Joomla, which is used in this plugin. In 2013-2014 I wrote...

Multiple vulnerabilities in Joomla-Base

Hello 3APA3A! These are Denial of Service, XML Injection, Cross-Site Scripting, Full path disclosure and Insufficient Anti-automation vulnerabilities in Joomla-Base. This is package of Joomla with different plugins with their vulnerabilities. These vulnerabilities are in Google Maps plugin for...

New vulnerabilities in Google Maps plugin for Joomla

Hello 3APA3A! Last year I wrote about multiple vulnerabilities in Google Maps plugin. After my informing the developer fixed them, but this year I found new vulnerabilities. These are Denial of Service and Insufficient Anti-automation vulnerabilities in Google Maps plugin for Joomla...

Ian Dunn: Stored XSS in all fields in Basic Google Maps Placemarks Settings

I am reporting this in general to all fields in Basic Google Maps Placemarks Settings plugin settings. The plugin settings page input fields: http://www.site.com/wp-admin/options-general.php?page=bgmpsettings are subject to XSS. Kindly check sir. Thank yoiu very much. Clifford Tirog...

Multiplatform WLAN Enumeration and Geolocation

Enumerate wireless networks visible to the target device. Optionally geolocate the target by gathering local wireless networks and performing a lookup against Google APIs. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

Google Maps plugin for Joomla, pre 3.1 and 2.20,

Google Maps plugin for Joomla, 3.1 and 2.20, XSS Cross Site Scripting joomla-base reumer.net developer statement A SECURITY RELEASE 3.1 of plugin Google Maps by Reumer is released and this must be applied to your Joomla installation...

Joomla-Base XSS / XML Injection / Denial Of Service

Hello list! These are Denial of Service, XML Injection, Cross-Site Scripting, Full path disclosure and Insufficient Anti-automation vulnerabilities in Joomla-Base. This is package of Joomla with different plugins with their vulnerabilities. These vulnerabilities are in Google Maps plugin for...

[Creepy] Geolocation information Gathering through Social Networking Platforms

Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentation on map, search filtering based on exact location and/or date, export in csv format or kml for further analysis in Google Maps. What's new in v1.0.x ? Creepy now uses Qt 4,...