CVE-2019-25100

The CVE concerns happyman twmap: a SQL injection in twmap3/data/ajaxCRUD/pointdata2.php via the id parameter. Affected versions are before v2.9_v4.31. Upgrading to v2.9_v4.31 addresses the issue (patch ID babbec79b3fa4efb3bd581ea68af0528d11bba0c; VDB-217645). Severity in the entry is CRITICAL wit...

CVE-2021-43696

CVE-2021-43696 (twmap) affects versions 2.91 through 4.33 of twmap, with a Cross Site Scripting (XSS) vulnerability in the list.php file. The root cause is the exit function printing a message that includes user-controlled input ($_REQUEST), enabling script injection. Impact is limited to the abi...