Description
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.
References
- http://www.mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/security-release-3-1-of-plugin-googlemaps.html
- [oss-security] 20150226 CVE request: Joomla Google Maps Plugin mailing-list
- 20130716 Multiple vulnerabilities in Googlemaps plugin for Joomla mailing-list
- [oss-security] 20150226 Re: CVE request: Joomla Google Maps Plugin mailing-list