CVE-2018-6396

Опубликовано: 17 фев. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action.

Ссылки

http://www.securityfocus.com/bid/103094
Third Party Advisory
VDB Entry
https://exploit-db.com/exploits/44113
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/103094
Third Party Advisory
VDB Entry
https://exploit-db.com/exploits/44113
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google_map_landkarten_project:google_map_landkarten:*:*:*:*:*:joomla\!:*:*

Версия до 4.2.3 (включая)

EPSS

Процентиль: 92%

0.07608

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-9vjh-4gwm-v5xm