Home / Early Warning / Vulnerabilidades / CVE-2018-6396

CVE-2018-6396

Type: 
SQL Injection
Severity: 
High
Publication date: 
02/17/2018
Last modified: 
03/05/2018
Description
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action.
Impact
Access Vector: Through network
Access Complexity: Low
Authentication: Not required to exploit
Impact Type: Partially affects on system integrity + Partially affects on system confidentiality + Partially affects on system availability
Vulnerable software and versions
  • cpe:2.3:a:google_map_landkarten_project:google_map_landkarten:*:*:*:*:*:joomla\!:*:*
To consult the complete list of products and versions see this page
References to Advisories, Solutions, and Tools
Explanation of fields