Vulnerabilities > CVE-2014-9686 - Resource Management Errors vulnerability in Mapsplugin Googlemaps 3.0/3.2

047910
CVSS 5.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
high complexity
mapsplugin
CWE-399

Summary

The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428.

Vulnerable Configurations

Part Description Count
Application
Mapsplugin
2

Common Weakness Enumeration (CWE)