CVE-2013-7429

Published: Sep 14, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.

Affected (1)

Products: Mapsplugin: Googlemaps

Mapsplugin

1 product

Googlemaps

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mapsplugin Googlemaps	Up to 3.0

Related CWEs

CWE-91

XML Injection (aka Blind XPath Injection)

The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

References (8)

http://seclists.org/fulldisclosure/2013/Jul/158

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html

Source: cve@mitre.org

PatchURL Repurposed

http://www.openwall.com/lists/oss-security/2015/02/26/11

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/02/26/4

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2013/Jul/158

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

http://www.mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchURL Repurposed

http://www.openwall.com/lists/oss-security/2015/02/26/11

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/02/26/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.