PT-2017-5751 · Joomla · Googlemaps Plugin

Hanno Böck · Published 2017-09-14 · Updated 2024-02-14 · CVE-2013-7429

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Googlemaps plugin for Joomla! versions prior to 3.1

Description: The issue allows remote attackers to conduct XML injection attacks. This is achieved by exploiting the url parameter in the plugin googlemap2 proxy.php file.

Recommendations: For Googlemaps plugin for Joomla! versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin googlemap2 proxy.php file to minimize the risk of exploitation. Avoid using the url parameter in the affected file until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-91

Related Identifiers

CVE-2013-7429

Affected Products

Googlemaps Plugin

References · 5

• 🔥 http://seclists.org/fulldisclosure/2013/Jul/158 · Exploit
• http://mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2013-7429 · Security Note
• http://openwall.com/lists/oss-security/2015/02/26/11 · Note
• http://openwall.com/lists/oss-security/2015/02/26/4 · Note