CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in traveller11 Google Maps Travel Route google-maps-travel-route allows SQL Injection.This issue affects Google Maps Travel Route: from n/a through <= 1.3.1.
Explanation of Vulnerability in Simple Terms
Google Maps Travel Route versions up to 1.3.1 contain a SQL injection vulnerability accessible to authenticated users. An attacker with low-level account access can inject malicious SQL commands through the application, potentially reading sensitive data from the database and disrupting service availability. The vulnerability affects multiple users and systems connected through the application.
What an attacker can do
Read sensitive data from the database and cause service disruptions via SQL injection.
Potential impact on your site
Unauthorized database access and potential data theft; service availability may be degraded.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
