Ysurac/FlightAirMap

GitHub

github.com

www.flightairmap.com

Releases25

Frequency1 month 5 days

Last Release over 8 years ago

Stars595

Open source project displaying live aircrafts, ships or trackers on 2D/3D map. Browse through the data based on a particular aircraft, airline, airport, tracker or vessel to search through the database or see extensive statistics. Can use ADS-B in SBS1 format (dump1090, Radarcape,...), VRS, VA (VATSIM, IVAO whazzup.txt, phpvms,...), ACARS (acarsdec, acarsdeco2), APRS, AIS as datasource.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-1000642 ↗	Aug 20, 2018Monday, 20 August 2018, 19:31	—	4.3 MEDIUM
FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09a3.
CVE-2017-6397 ↗	Mar 2, 2017Thursday, 2 March 2017, 06:59	6.1 MEDIUM	4.3 MEDIUM
An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several *-sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.