34 matches found
Geo Mashup <= 1.13.18 - SQL Injection
Geo Mashup WordPress plugin = 1.13.18 is vulnerable to time-based SQL injection via the sort parameter. The issue exists because the sort value is insufficiently sanitized in render-map.php/template tag code paths. id: CVE-2026-4060 info: name: Geo Mashup = 1.13.18 - SQL Injection author:...
EUVD-2008-6392
Malware in sbrugna...
EUVD-2019-18493
Malware in sbrugna...
EUVD-2020-7163
Malware in sbrugna...
EUVD-2025-32458
A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...
ixmaps.ca website 安全漏洞
ixmaps.ca website is a website page of ixmaps open source. A security vulnerability exists in ixmaps.ca website, which stems from an incorrect manipulation of the parameter trid in the file /map.php, which could lead to a cross-site scripting attack...
PT-2025-40807
Name of the Vulnerable Software and Affected Versions ixmaps website2017 versions prior to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 Description A security flaw exists that allows for cross site scripting. The issue is related to the manipulation of the trid argument within an HTTP GET request...
CVE-2020-15035
NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter...
CVE-2020-15028
NeDi 1.9C is vulnerable to a cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter...
Cross site scripting
NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter...
CVE-2020-15028
NeDi 1.9C is vulnerable to a cross-site scripting (XSS) flaw. The issue allows an attacker to execute arbitrary JavaScript via the Topology-Map.php page parameter xo. This appears consistently across multiple feeds (NVD, CNVD, PRION, OpenVAS) and is described as a web-application XSS without evid...
CVE-2020-15035
CVE-2020-15035 affects NeDi 1.9C, where a Cross-Site Scripting (XSS) flaw exists in the Monitoring-Map.php page via the hde parameter. The vulnerability allows an attacker to inject and execute arbitrary JavaScript in the victim’s browser, as described across multiple sources (NVD/CNVD/PRION/CVE ...
CVE-2020-15035
NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter...
Cross site scripting
XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=XSS&y=XSS to coreframe/app/core/map.php...
cargomarketing.com XSS vulnerability
Open Bug Bounty ID: OBB-673805 Description| Value ---|--- Affected Website:| cargomarketing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tambaroora.com XSS vulnerability
Open Bug Bounty ID: OBB-600171 Description| Value ---|--- Affected Website:| tambaroora.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sdm.scad.edu XSS vulnerability
Vulnerable URL: https://sdm.scad.edu/intranet/students/map.php?quarter=Spring%202017=309=1"...
advantagebasketball.com XSS vulnerability
Open Bug Bounty ID: OBB-255467 Description| Value ---|--- Affected Website:| advantagebasketball.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...