CVE-2014-6239

Address visualization with Google Maps < 0.3.6 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in the Address visualization with Google Maps (st_address_map) extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/69564

Patch, Vendor Advisory x_refsource_misc

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010

Vendor Advisory x_refsource_confirm

http://typo3.org/extensions/repository/view/st_address_map

Scores

EPSS 0.0125

EPSS Percentile 66.2%

Details

CWE

CWE-89

Status published

Products (6)

address_visualization_with_google_maps_project/address_visualization_with_google_maps 0.3.0

address_visualization_with_google_maps_project/address_visualization_with_google_maps 0.3.1

address_visualization_with_google_maps_project/address_visualization_with_google_maps 0.3.2

address_visualization_with_google_maps_project/address_visualization_with_google_maps 0.3.3

address_visualization_with_google_maps_project/address_visualization_with_google_maps 0.3.4

address_visualization_with_google_maps_project/address_visualization_with_google_maps < 0.3.5

Published Sep 11, 2014

Tracked Since Feb 18, 2026