mapsplugin vulnerabilities

Products

• googlemaps 7

Latest mapsplugin CVEs

Newest publication first

1. CVE-2014-9686 The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googl...

   Published 2017-09-28

   Medium·CVSS 5.9

   The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix...

2. CVE-2013-7429 The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.

   Published 2017-09-14

   Critical·CVSS 9.8

   The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.

3. CVE-2013-7428 The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.

   Published 2017-09-07

   High·CVSS 7.5

   The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.

4. CVE-2013-7433 Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.

   Published 2017-08-29

   Medium·CVSS 6.1

   Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.

5. CVE-2013-7432 The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.

   Published 2017-08-29

   High·CVSS 7.5

   The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.

6. CVE-2013-7431 Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.

   Published 2017-08-29

   Medium·CVSS 5.3

   Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.

7. CVE-2013-7430 Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter.

   Published 2017-08-28

   Medium·CVSS 6.1

   Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.