Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin

High-Tech Bridge Security Research Lab discovered three XSS vulnerabilities in WP Google Maps WordPress plugin, which can be exploited to perform Cross-Site Scripting XSS attacks against administrators of vulnerable WP website. 1 Multiple XSS in WP Google Maps WordPress plugin: CVE-2014-7182 1.1...

Google Maps Ready! 1.1.5 - CSRF & XSS

The google-maps-ready WordPress plugin was affected by a CSRF & XSS security vulnerability...

WordPress Google Maps Ready! Plugin - 1.1.5 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

SA-CONTRIB-2014-089 - Geofield Yandex Maps - Cross Site Scripting (XSS)

The Geofield Yandex Maps module provides a Geofield widget, Geofield formatter, Views handler, Form element and Text filter to allow Yandex maps to be added to a site. The module does not sufficiently filter user-supplied text, resulting in a persistent Cross Site Scripting XSS vulnerability. The...

CVE-2014-6239

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6239

The CVE-2014-6239 issue affects the TYPO3 extension Address visualization with Google Maps (st_address_map). The vulnerability is a SQL injection in st_address_map prior to version 0.3.6 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The TYPO3 security bul...

CVE-2014-6239

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CSRF, XSS Vulnerabilities Afflict Wordpress Plugins

A smattering of bugs, mostly cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities, have been plaguing at least eight different WordPress plugins as of late. A security researcher going by the pseudonym Voxel@Night published on Monday information regarding the...

CVE-2014-2628

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-2628

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-2628

CVE-2014-2628 concerns HP Enterprise Maps 1, where remote authenticated users can disclose sensitive information via unknown vectors. The vulnerability is documented in HP’s security bulletin HPSBMU03081 rev.1, which specifies that only HP Enterprise Maps v1 is affected and that HP has provided a...

[security bulletin] HPSBMU03081 rev.1 - HP Enterprise Maps, Remote Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04390793 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04390793 Version: 1 HPSBMU03081 rev....

Basic Google Maps Placemarks 1.10.2 - settings.php Multiple Fields Stored XSS Weakness

The Basic Google Maps Placemarks WordPress plugin was affected by a settings.php Multiple Fields Stored XSS Weakness security vulnerability...

Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin was affected by a Two SQL Injection Vulnerabilities security vulnerability...

Leaflet Maps Marker Pro - SQLI, XSS, Shell Upload, file delete

The leaflet-maps-marker-pro WordPress plugin was affected by a SQLI, XSS, Shell Upload, file delete security vulnerability...

Leaflet Maps Marker - Multiple security issues

The mapsmarker WordPress plugin was affected by a Multiple security issues security vulnerability...

Google Maps via Store Locator - Multiple Vulnerabilities

The Store Locator Plus® for WordPress WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress Basic Google Maps Placemarks Plugin <= 1.10.2 - XSS

This plugin is prone to a settings.php multiple fields stored XSS weakness. Solution Upgrade this plugin...