CVE-2014-9686 The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googl...
MediumCVSS 5.9
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mapsplugin googlemaps | <= 3.2 | No fix listed |
References
- 20140207 New vulnerabilities in Google Maps plugin for Joomla mailing-list third-party-advisory
- websecurity.com.ua exploit third-party-advisory
- [oss-security] 20150226 Re: CVE request: Joomla Google Maps Plugin mailing-list third-party-advisory