CVE-2014-6239

2014-09-1114:16:05

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-6239

sql injection

address visualization

google maps

remote attackers

arbitrary sql commands

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

JSON

SQL injection vulnerability in the Address visualization with Google Maps (st_address_map) extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

address_visualization_with_google_maps_projectaddress_visualization_with_google_mapsRange≤0.3.5typo3

address_visualization_with_google_maps_projectaddress_visualization_with_google_mapsMatch0.3.0typo3

address_visualization_with_google_maps_projectaddress_visualization_with_google_mapsMatch0.3.1typo3

address_visualization_with_google_maps_projectaddress_visualization_with_google_mapsMatch0.3.2typo3

address_visualization_with_google_maps_projectaddress_visualization_with_google_mapsMatch0.3.3typo3

address_visualization_with_google_maps_projectaddress_visualization_with_google_mapsMatch0.3.4typo3

CPENameOperatorVersion
address_visualization_with_google_maps_project:address_visualization_with_google_mapsaddress visualization with google maps project address visualization with google mapsle0.3.5
address_visualization_with_google_maps_project:address_visualization_with_google_mapsaddress visualization with google maps project address visualization with google mapseq0.3.0
address_visualization_with_google_maps_project:address_visualization_with_google_mapsaddress visualization with google maps project address visualization with google mapseq0.3.1
address_visualization_with_google_maps_project:address_visualization_with_google_mapsaddress visualization with google maps project address visualization with google mapseq0.3.2
address_visualization_with_google_maps_project:address_visualization_with_google_mapsaddress visualization with google maps project address visualization with google mapseq0.3.3
address_visualization_with_google_maps_project:address_visualization_with_google_mapsaddress visualization with google maps project address visualization with google mapseq0.3.4

CPE	Name	Operator	Version
address_visualization_with_google_maps_project:address_visualization_with_google_maps	address visualization with google maps project address visualization with google maps	le	0.3.5
address_visualization_with_google_maps_project:address_visualization_with_google_maps	address visualization with google maps project address visualization with google maps	eq	0.3.0
address_visualization_with_google_maps_project:address_visualization_with_google_maps	address visualization with google maps project address visualization with google maps	eq	0.3.1
address_visualization_with_google_maps_project:address_visualization_with_google_maps	address visualization with google maps project address visualization with google maps	eq	0.3.2
address_visualization_with_google_maps_project:address_visualization_with_google_maps	address visualization with google maps project address visualization with google maps	eq	0.3.3
address_visualization_with_google_maps_project:address_visualization_with_google_maps	address visualization with google maps project address visualization with google maps	eq	0.3.4