CVE-2013-7429

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-14

Last modified

2024-08-06

Weaknesses

CWE-91

Affected products

• Googlemaps (Mapsplugin)

References

• http://seclists.org/fulldisclosure/2013/Jul/158
• http://www.mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html
• http://www.openwall.com/lists/oss-security/2015/02/26/11
• http://www.openwall.com/lists/oss-security/2015/02/26/4