locator vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Unspecified vulnerability in the Store Locator (locator) extension prior to 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."

Joachim Ruhs Locator 2.9.0 Joachim Ruhs Locator Joachim Ruhs Locator 1.2.6 Joachim Ruhs Locator 1.2.8 Joachim Ruhs Locator 1.0.6 Joachim Ruhs Locator 1.0.7 Joachim Ruhs Locator 1.1.0 Joachim Ruhs Locator 1.1.8

7.5

CVSSv2

SQL injection vulnerability in the Store Locator (locator) extension prior to 3.1.5 for TYPO3 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Joachim Ruhs Locator 1.1.0 Joachim Ruhs Locator 1.1.8 Joachim Ruhs Locator 2.9.0 Joachim Ruhs Locator Joachim Ruhs Locator 1.2.6 Joachim Ruhs Locator 1.2.8 Joachim Ruhs Locator 1.0.6 Joachim Ruhs Locator 1.0.7

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension prior to 3.1.5 for TYPO3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Joachim Ruhs Locator 2.9.0 Joachim Ruhs Locator Joachim Ruhs Locator 1.1.0 Joachim Ruhs Locator 1.1.8 Joachim Ruhs Locator 1.0.6 Joachim Ruhs Locator 1.0.7 Joachim Ruhs Locator 1.2.6 Joachim Ruhs Locator 1.2.8

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Store Locator extension prior to 1.2.8 for TYPO3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Joachim Ruhs Locator 1.0.7 Joachim Ruhs Locator 1.1.0 Joachim Ruhs Locator 1.0.6 Joachim Ruhs Locator Joachim Ruhs Locator 1.1.8

7.5

CVSSv2

SQL injection vulnerability in the Store Locator extension prior to 1.2.8 for TYPO3 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Joachim Ruhs Locator Joachim Ruhs Locator 1.1.8 Joachim Ruhs Locator 1.1.0 Joachim Ruhs Locator 1.0.6 Joachim Ruhs Locator 1.0.7

7.5

CVSSv2

SQL injection vulnerability in the Store Locator plugin 2.3 up to and including 3.11 for WordPress allows remote malicious users to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.

Store Locator Project Store Locator 2.3 Store Locator Project Store Locator 3.11

NA

A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It is possible to initia...

Documentlocator Document Locator 21 Documentlocator Document Locator 7.2 Documentlocator Document Locator

6.5

CVSSv2

SQL injection vulnerability in the Store Locator (locator) extension prior to 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Store Locator Project Store Locator

4

CVSSv2

The String locator WordPress plugin prior to 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowi...

String Locator Project String Locator

NA

The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via the 'string-locator-path' parameter in versions up to, and including 2.5.0. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they ...

Instawp String Locator

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook