33 matches found
wuzhicms \coreframe\app\content\map.php variable cityname SQL injection
No description provided by source...
nuigalway.ie XSS vulnerability
Vulnerable URL: http://www.nuigalway.ie/generic/map/map.php?pageTitle=...
Count Per Day <= 3.1 - map.php map Parameter XSS
The Count per Day WordPress plugin was affected by a map.php map Parameter XSS security vulnerability...
WordPress Eco-Annu SQL Injection
Exploit Title: Wordpress Eco-annu Plugin SQL Injection Vulnerability Google Dork: inurl:"/eco-annu/map.php?eid=" Exploit Author: Ashiyane Digital Security Team Tested on: Windows 7 Location: http://site.com/wp-content/plugins/eco-annu/map.php?eid=SQL Demo :...
CVE-2012-0895
The CVE-2012-0895 issue affects the WordPress Count Per Day plugin; XSS vulnerability in map/map.php can be triggered via the map parameter and is present in versions before 3.1.1. Remediation: upgrade to version 3.1.1 or later. If upgrading is not possible, apply vendor advisories/workarounds fr...
CVE-2012-0895
Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in charmap.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the 1 height or 2 width parameter...
Sql injection
Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attackers to execute arbitrary SQL commands via the hotelid parameter to 1 hotel.php, 2 details.php, 3 roomtypes.php, 4 photos.php, 5 map.php, 6 weather.php, 7 reviews.php, and 8 book.p...
LiveZilla "map.php"跨站脚本漏洞
CVE ID:CVE-2009-4450 LiveZilla是一款在线客服与客户地理位置跟踪系统。 LiveZilla包含的'Map.php'脚本不正确过滤用户输入,远程攻击者可以通过提交恶意脚本代码作为"lat", "lng"和"zom"参数数据,诱使用户解析,可导致在目标用户浏览器上执行恶意脚本代码,获得敏感信息。 GmbH LiveZilla 3.1.8.3 目前没有解决方案提供: http://www.livezilla.net/home/en/...
LiveZilla v3.1.8.3 XSS Vulnerability
No description provided by source. Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits:...
CVE-2009-4450
Multiple cross-site scripting XSS vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lat, 2 lng, and 3 zom parameters, which are not properly handled when processed with templates/map.tpl...
CVE-2009-4450
Multiple cross-site scripting XSS vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lat, 2 lng, and 3 zom parameters, which are not properly handled when processed with templates/map.tpl...
CVE-2009-4450
LiveZilla