critical9.8Public exploit code
CVE-2018-6396
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component Google Map Landkarten 4.2.3 - SQL Injection2018-02-16 · webapps · php · Verified
Impact
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Google Map Landkarten Project | Google Map Landkarten | through 4.2.3 |