CVE-2014-2843

CVE-2014-2843 is a reflected XSS vulnerability in infoware MapSuite MapAPI. Affected versions are MapAPI before 1.0.36 (and 1.1.x before 1.1.49). Fixed releases are MapAPI 1.0.36 and 1.1.49. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, ...

CVE-2014-2232

Summary (CVE-2014-2232) : Affected product: Infoware MapSuite, specifically MapAPI. Vulnerable components: MapAPI prior to 1.0.36 and 1.1.x prior to 1.1.49. Root cause: absolute path traversal that allows reading arbitrary files via unspecified vectors. Impact: partial confidentiality loss (read ...

CVE-2014-2233

CVE-2014-2233 (Infoware MapSuite MapAPI) is a Server-Side Request Forgery (SSRF) vulnerability in MapSuite MapAPI that allows an attacker to trigger requests from the vulnerable server to internal/intranet targets via specially crafted input parameters. Affected versions are MapAPI prior to 1.0.3...