CVE:CVE-2014-6239
CNNVD:CNNVD-201409-020
TYPO3是瑞士TYPO3协会维护的一套免费开源的内容管理系统(框架)(CMS/CMF)。Address visualization with Google Maps（st_address_map）是其中的一个支持在谷歌地图上显示地址的扩展插件。
TYPO3 Address visualization with Google Maps (st_address_map)扩展0.3.5及之前版本中存在SQL注入漏洞。远程攻击者可利用该漏洞执行任意SQL命令。
solution:Upgrade address_visualization_with_google_maps_project address_visualization_with_google_maps to a higher version than 0.3.5,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,and avoid the version (,0.3.5],0.3.0,0.3.1,0.3.2,0.3.3,0.3.4