CVE-2013-7429 The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mapsplugin googlemaps | <= 3.0 | No fix listed |
References
- 20130716 Multiple vulnerabilities in Googlemaps plugin for Joomla exploit mailing-list third-party-advisory
- www.mapsplugin.com patch url-repurposed
- [oss-security] 20150226 Re: CVE request: Joomla Google Maps Plugin mailing-list third-party-advisory
- [oss-security] 20150226 CVE request: Joomla Google Maps Plugin mailing-list third-party-advisory