PT-2017-5751 · Joomla · Googlemaps Plugin

Hanno Böck · CVE-2013-7429 · Publicado 2017-09-14 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Googlemaps plugin for Joomla! versions prior to 3.1

Description: The issue allows remote attackers to conduct XML injection attacks. This is achieved by exploiting the url parameter in the plugin googlemap2 proxy.php file.

Recommendations: For Googlemaps plugin for Joomla! versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin googlemap2 proxy.php file to minimize the risk of exploitation. Avoid using the url parameter in the affected file until the issue is resolved.

Exploit

Correção

Enumeração de Fraquezas

CWE-91

Identificadores relacionados

CVE-2013-7429

Produtos afetados

Googlemaps Plugin

Referências · 5

• 🔥 http://seclists.org/fulldisclosure/2013/Jul/158 · Exploit
• http://mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2013-7429 · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/02/26/11 · Nota
• http://openwall.com/lists/oss-security/2015/02/26/4 · Nota