Design/Logic Flaw

2017-09-1416:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

JSON

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.

CPENameOperatorVersion
googlemapsle3.0

CPE	Name	Operator	Version
	googlemaps	le	3.0

References

seclists.org/fulldisclosure/2013/Jul/158

www.mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html

www.openwall.com/lists/oss-security/2015/02/26/11

www.openwall.com/lists/oss-security/2015/02/26/4