Unscored CVE-2014-9686 EUVD-2014-9494GHSA-mc2q-6788-6mr3

The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to caus…

Published Sep 27, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428.

References

20140207 New vulnerabilities in Google Maps plugin for Joomla mailing-list
http://websecurity.com.ua/6987/
[oss-security] 20150226 Re: CVE request: Joomla Google Maps Plugin mailing-list