952 matches found
Ian Dunn: [Not just a server configuration issue] Full Path Disclosure
Hey, I've just found a 'full path disclosure' in basic-google-maps-placemarks, so it's not just a server configuration issue! I've tested it on different servers including windows, ubuntu, CentOS etc.. PoC So, if we visit wp-content/plugins/basic-google-maps-placemarks/unit-tests.php it is clearl...
Ian Dunn: CSRF in changing settings of Basic Google Maps Placemarks
Hey, this is Ahsan Tahir! I was just pentesting Basic Google Maps Placemarks in Wordpress, I found a CSRF Cross-Site Request Forgery So, by exploiting this CSRF issue, an attacker can edit the settings e.g Map Width, Map Height, Map Center Address etc.. PoC There is not CSRF token/Authentication...
Google to Face a Record $3.4 Billion AntiTrust Fine in Europe
Google faces a record anti-trust penalty of about 3 BILLION Euros US$3.4 Billion from the European Commission in the coming days, according to reports. After 7-years of the investigation, the European Commission filed anti-trust charges against Google last year for violating antitrust laws. The...
IPGeoLocation - A tool to retrieve IP Geolocation information
A tool to retrieve IP Geolocation information Powered by ip-api Requirements Python 3.x Features Retrieve IP or Domain Geolocation. Retrieve your own IP Geolocation. Retrieve Geolocation for IPs or Domains loaded from file. Each target in new line. Define your own custom User Agent string. Select...
URL Shorteners Put Private Cloud Data at Risk
URL shorteners are convenient, but for a long time gave security practitioners anxiety because it was difficult to determine where the shortened address was taking you. Two researchers have now given you new reasons to fear URL shorteners, especially for those storing and sharing data on...
WordPress BestWebSoft Google Maps 1.2.1 Cross Site Scripting
Plugin Name : BestWebSoft Google Maps Effected Version : 1.2.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the...
Geotweet - Social engineering tool for human hacking
Another way to use Twitter and instagram. Geotweet is an osint application that allows you to track tweets and instagram and trace geographical locations and then export to google maps. Allows you to search on tags, world zones and user info and timeline. Requirements Python 2.7 PyQt4, tweepy,...
WordPress Google Maps Plugin <= 2.3.9 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Googlemaps Plugin Path Disclosure Vulnerability in Joomla!
Joomla! is a content management system. Joomla! Googlemaps plugin is a plugin for inserting google maps for Joomla! A path disclosure vulnerability exists in Joomla! Googlemaps Plugin that allows attackers to obtain sensitive information...
Security Bypass Vulnerability in Joomla! Googlemaps Plugin
Joomla! is a content management system. Joomla! Googlemaps plugin is a plugin for inserting google maps for Joomla! A security bypass vulnerability exists in Joomla! Googlemaps plugin, which can be exploited by attackers to bypass certain security restrictions...
CVE-2014-100006
Multiple cross-site scripting XSS vulnerabilities in modulesv3/googlemap/wtv3streetview.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 map, 2 streetview, or 3 reset parameter...
CVE-2014-7182
Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...
CVE-2014-7182
The CVE-2014-7182 entry affects the WP Google Maps WordPress plugin, with XSS vulnerabilities in versions prior to 6.0.27. The underlying issue is unsanitized input via the poly_id parameter used by actions edit_poly, edit_polyline, and edit_marker on the wp-google-maps-menu page routed to wp-adm...
CVE-2014-7182
Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...
PT-2014-7820 · WordPress · Wp Google Maps
Name of the Vulnerable Software and Affected Versions: WP Google Maps plugin versions prior to 6.0.27 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the poly id parameter in an edit poly, edit polyline, or edit marker action in the "wp-google-maps-menu"...
CVE-2014-7182: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...
Contact Form Integrated With Google Maps 1.0-2.4 - Stored Cross-Site Scripting (XSS)
The Contact Form Integrated With Google Maps WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...
Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin
Advisory ID: HTB23236 Product: WP Google Maps WordPress plugin Vendor: WP Google Maps Vulnerable Versions: 6.0.26 and probably prior Tested Version: 6.0.26 Advisory Publication: September 24, 2014 without technical details Vendor Notification: September 24, 2014 Vendor Patch: September 29, 2014...
WordPress WP Google Maps 6.0.26 Cross Site Scripting Vulnerability
WordPress WP Google Maps plugin version 6.0.26 suffers from a cross site scripting vulnerability. Product: WP Google Maps WordPress plugin Vendor: WP Google Maps Vulnerable Versions: 6.0.26 and probably prior Tested Version: 6.0.26 Advisory Publication: September 24, 2014 without technical detail...