90 matches found
PT-2018-14008
Name of the Vulnerable Software and Affected Versions Joomla! Social Factory version 3.8.3 Description A SQL Injection issue exists in the Social Factory component for Joomla!, which can be exploited via the radiuslat, radiuslng, or radiusradius parameter. Recommendations For version 3.8.3,...
CVE-2018-17385: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...
Design/Logic Flaw
Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon...
LocalTapiola: Multiple Reflected XSS /webApp/lahti (viestinta.lahitapiola.fi)
Vulnerable script: /webApp/lahti Vulnerable parameters: ctxvarshtml, ctxvarszoom, ctxvarsLat, ctxvarsLng PoC 1 html parameter https://blackfan.ru/localtapiola4567uytr567tre4567ytr/poc1html.html Result: html alertdocument.location PoC 2 zoom parameter...
PT-2015-5871
Name of the Vulnerable Software and Affected Versions AB Google Map Travel AB-MAP plugin versions prior to 4.0 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved vi...
CVE-2009-4450: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lat, 2 lng, and 3 zom parameters, which are not properly handled when processed with templates/map.tpl...
CVE-1999-1032
Vulnerability in LAT/Telnet Gateway lattelnet on Ultrix 4.1 and 4.2 allows attackers to gain root privileges...
CVE-1999-1032
CVE-1999-1032 concerns a vulnerability in the LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 that allows attackers to obtain root privileges. The available documents identify the affected software (LAT/Telnet Gateway on Ultrix 4.1/4.2) and the outcome (root privilege escalation) but do not ...
