CVE-2018-6396 SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action.
CriticalCVSS 9.8
EPSS 23.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google map landkarten project google map landkarten | <= 4.2.3 | No fix listed |