CVE-2020-15035: Improper Neutralization of Input During Web Page Generation

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter...

CVE-2020-15028: Improper Neutralization of Input During Web Page Generation

NeDi 1.9C is vulnerable to a cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter...

Cross site scripting

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=XSS&y=XSS to coreframe/app/core/map.php...

CVE-2019-9108: Improper Neutralization of Input During Web Page Generation

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=XSS&y=XSS to coreframe/app/core/map.php...

cargomarketing.com XSS vulnerability

Open Bug Bounty ID: OBB-673805 Description| Value ---|--- Affected Website:| cargomarketing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tambaroora.com XSS vulnerability

Open Bug Bounty ID: OBB-600171 Description| Value ---|--- Affected Website:| tambaroora.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sdm.scad.edu XSS vulnerability

Vulnerable URL: https://sdm.scad.edu/intranet/students/map.php?quarter=Spring%202017=309=1"...

advantagebasketball.com XSS vulnerability

Open Bug Bounty ID: OBB-255467 Description| Value ---|--- Affected Website:| advantagebasketball.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

classifieds.dnj.com XSS vulnerability

Vulnerable URL: http://classifieds.dnj.com/map.php?place=Garage+Sales=1/-///'/"//--...

classifieds.app.com XSS vulnerability

Vulnerable URL: http://classifieds.app.com/map.php?place=Garage+Sales=1/-///'/"//--...

n-shigoto.com XSS vulnerability

Vulnerable URL: http://www.n-shigoto.com/map.php?id=566"%27--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check n-shigoto.com...

wuzhicms \coreframe\app\content\map.php variable cityname SQL injection

No description provided by source...

nuigalway.ie XSS vulnerability

Vulnerable URL: http://www.nuigalway.ie/generic/map/map.php?pageTitle=...

Count Per Day <= 3.1 - map.php map Parameter XSS

The Count per Day WordPress plugin was affected by a map.php map Parameter XSS security vulnerability...

CVE-2014-4587: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 zl, 2 mt, or 3 dc parameter to guest-locator.php; the 4 zl, 5 mt, 6 activate, or 7 dc parameter to online-tracker.php;...

WordPress Eco-Annu SQL Injection

Exploit Title: Wordpress Eco-annu Plugin SQL Injection Vulnerability Google Dork: inurl:"/eco-annu/map.php?eid=" Exploit Author: Ashiyane Digital Security Team Tested on: Windows 7 Location: http://site.com/wp-content/plugins/eco-annu/map.php?eid=SQL Demo :...

CVE-2012-0895

Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...

CVE-2012-0895

The CVE-2012-0895 issue affects the WordPress Count Per Day plugin; XSS vulnerability in map/map.php can be triggered via the map parameter and is present in versions before 3.1.1. Remediation: upgrade to version 3.1.1 or later. If upgrading is not possible, apply vendor advisories/workarounds fr...

CVE-2012-0895: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in charmap.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the 1 height or 2 width parameter...