42 matches found
CVE-2005-1715
Cross-site scripting XSS vulnerability in index.php for TOPo 2.2 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the 1 m, 2 s, 3 ID, or 4 t parameters, or the 5 field name, 6 Your Web field, or 7 email field in the comments section...
CVE-2005-1716
TOPo 2.2 2.2.178 stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses...
EUVD-2006-0987
Malware in sbrugna...
EUVD-2006-3531
Malware in sbrugna...
EUVD-2003-1399
Malware in sbrugna...
EUVD-2005-1717
Malware in sbrugna...
EUVD-2006-3827
Malware in sbrugna...
topo-bfc.info Cross Site Scripting vulnerability OBB-3861482
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Raven - Advanced Cyber Threat Map (Simplified, Customizable, Responsive)
Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Live - Demo https://qeeqbox.github.io/raven/ Offline - Demo Features Uses D3.js Not...
HPE Intelligent Management Center (IMC) TopoDebugServlet Expression Language Injection Remote Code Execution Vulnerability (CNVD-2019-23783)
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A TopoDebugServlet expression language injection remote code execution vulnerability exists in HPE...
BackCountry Nav Topo Maps GPS - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application BackCountry Nav Topo Maps GPS published at the 'play' market has multiple vulnerabilities...
EJ3 TOPo 2.2.178 Inc_header.PHP Cross-Site Scripting Vulnerability
No description provided by source...
EJ3 TOPo 2.2 - Multiple Index.PHP Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13700/info TOPo is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...
TOPO 1.41 Remote Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6768/info It has been reported that TOPo may return information to users that is sensitive in nature. Under some circumstances, it is possible to produce an error message that reveals information about web directory...
CVE-2003-1409
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to 1 in.php or 2 out.php, which reveals the path to the TOPo directory in the error message...
CVE-2003-1409
TOPo 1.43 is affected by an information disclosure vulnerability. Sending an HTTP request with an invalid parameter to in.php or out.php can reveal the path to the TOPo directory in the error message, enabling potential information disclosure to remote attackers. Exploit details (e.g., exploit co...
CVE-2006-3833
index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID...
CVE-2006-3834
EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors...
CVE-2006-3834
EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors...
CVE-2006-3833
index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID...