56 matches found
CVE-2013-7430
Cross-site scripting XSS vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter...
CVE-2013-7430
CVE-2013-7430 concerns the Joomla! Googlemaps plugin vulnerable to cross-site scripting (XSS) via the xmlns parameter in versions prior to 3.1. The cited sources consistently describe an XSS path that allows remote attackers to inject arbitrary web script or HTML when processing the xmlns paramet...
CVE-2013-7430
Cross-site scripting XSS vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter...
Huge IT Googlemaps,1.0.9,SQL Injection
Huge IT Googlemaps,1.0.9, Multiple SQL Injection vulnerabilities...
Joomla! Googlemaps Plugin多个远程安全漏洞
Bugtraq ID:61497 Joomla! Googlemaps plugin是一款用于Joomla!的插入google地图的插件 Joomla! Googlemaps插件存在多个安全漏洞,允许远程攻击者利用漏洞进行拒绝服务或跨站脚本攻击,可使应用程序崩溃或获取敏感信息 0 Joomla! Googlemaps Plugin v3.2 厂商解决方案 目前没有详细解决方案提供: http://extensions.joomla.org/extensions/maps-a-weather/maps-a-locations/maps/1147 拒绝服务攻击:...
DoS and XSS vulnerabilities in Googlemaps plugin for Joomla
Hello 3APA3A! Earlier I wrote about multiple vulnerabilities in Googlemaps plugin for Joomla http://securityvulns.ru/docs29645.html. After my informing, the developer fixed these vulnerabilities in versions 2.19 and 3.1 of the plugin - by removing proxy functionality. And in version 3.2 of the...
Joomla Googlemaps 3.2 Cross Site Scripting / Denial Of Service
Hello list! Earlier I wrote about multiple vulnerabilities in Googlemaps plugin for Joomla http://securityvulns.ru/docs29645.html. After my informing, the developer fixed these vulnerabilities in versions 2.19 and 3.1 of the plugin - by removing proxy functionality. And in version 3.2 of the plug...
Joomla Googlemaps Multiple Vulnerabilities
Joomla Googlemaps plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
Multiple vulnerabilities in Googlemaps plugin for Joomla
Hello 3APA3A! These are Denial of Service, XML Injection, Cross-Site Scripting and Full path disclosure vulnerabilities in Googlemaps plugin for Joomla. ------------------------- Affected products: ------------------------- Vulnerable are Googlemaps plugin for Joomla versions 2.x and 3.x and...
Joomla Googlemaps Plugin XSS / XML Injection / Path Disclosure / DoS
The Joomla Googlemaps plugin suffers from cross site scripting, path disclosure, denial of service, and XML injection vulnerabilities. These are Denial of Service, XML Injection, Cross-Site Scripting and Full path disclosure vulnerabilities in Googlemaps plugin for Joomla. -----------------------...
Joomla Googlemaps XSS / XML Injection / Path Disclosure / DoS
Hello list! These are Denial of Service, XML Injection, Cross-Site Scripting and Full path disclosure vulnerabilities in Googlemaps plugin for Joomla. ------------------------- Affected products: ------------------------- Vulnerable are Googlemaps plugin for Joomla versions 2.x and 3.x and...
Joomla Real Estate Code Injection
=================================================== Joomla Real Estate Component Upload Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...
Sql injection
SQL injection vulnerability in the Googlemaps for ttnews jfeasymaps extension 1.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-0330
SQL injection vulnerability in the Googlemaps for ttnews jfeasymaps extension 1.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-0330
The CVE-2010-0330 entry concerns the TYPO3 extension Googlemaps for tt_news (jf_easymaps). Affected versions are 1.0.2 and earlier. The root cause is an SQL injection vulnerability that lets remote attackers execute arbitrary SQL commands via unspecified vectors. Practical impact is information d...