CVE-2013-7429: XML Injection (aka Blind XPath Injection)

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugingooglemap2proxy.php...

PT-2017-5751 · Joomla · Googlemaps Plugin

Name of the Vulnerable Software and Affected Versions: Googlemaps plugin for Joomla! versions prior to 3.1 Description: The issue allows remote attackers to conduct XML injection attacks. This is achieved by exploiting the url parameter in the plugin googlemap2 proxy.php file. Recommendations: Fo...

CVE-2013-7428

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugingooglemap2proxy.php...

Code injection

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugingooglemap2proxy.php...

CVE-2013-7428

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugingooglemap2proxy.php...

CVE-2013-7428

CVE-2013-7428 affects the Joomla Googlemaps plugin prior to version 3.1. The vulnerability is a denial-of-service condition triggered by the url parameter to the proxy endpoint plugin_googlemap2_proxy.php, allowing remote attackers to exhaust resources. Public documents consistently describe the ...

PT-2017-5750 · Joomla · Joomla! Googlemaps Plugin

Name of the Vulnerable Software and Affected Versions: Joomla Googlemaps plugin versions prior to 3.1 Description: The issue allows remote attackers to cause a denial of service. This can be achieved via the url parameter to the "plugin googlemap2 proxy.php" endpoint. Recommendations: For version...

CVE-2013-7428: Uncontrolled Resource Consumption

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugingooglemap2proxy.php...

Design/Logic Flaw

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism...

Path traversal

Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!...

CVE-2013-7432

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism...

CVE-2013-7431

Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!...

CVE-2013-7433

Cross-site scripting XSS vulnerability in the Googlemaps plugin before 3.1 for Joomla!...

Cross site scripting

Cross-site scripting XSS vulnerability in the Googlemaps plugin before 3.1 for Joomla!...

CVE-2013-7432

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism...

CVE-2013-7433

CVE-2013-7433 corresponds to a Cross-site scripting (XSS) vulnerability in the Googlemaps plugin for Joomla! prior to version 3.1. The issue affects the Googlemaps plugin’s handling of input in Joomla! environments, enabling injected scripts under certain conditions. The vulnerability is document...

CVE-2013-7431

Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!...

CVE-2013-7433

Cross-site scripting XSS vulnerability in the Googlemaps plugin before 3.1 for Joomla!...

CVE-2013-7432

CVE-2013-7432 concerns the Joomla! Googlemaps plugin (versions prior to 3.1). The vulnerability allows remote attackers to bypass an intended protection mechanism in the plugin, effectively a security bypass of access controls within the Googlemaps feature. Affected component is the Googlemaps pl...

CVE-2013-7431

CVE-2013-7431 targets the Googlemaps plugin for Joomla! and is a full path disclosure vulnerability in versions prior to 3.1. The underlying issue is a path disclosure in the plugin that can expose sensitive server paths, causing partial confidentiality impact without compromising integrity or av...