Zh GoogleMap SQL Injection Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features. Zh GoogleMap is used in one of the Google Maps component. A SQL injection vulnerability exists in version 8.4.0.0 of Joomla! A...

Joomla! Zh BaiduMap 3.0.0.1 SQL Injection

input name="id" value="-11 UNION ALL SELECT...

Sql injection

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...

CVE-2018-6604

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...

CVE-2018-6605

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

CVE-2018-6582: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

CVE-2018-6605: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

PT-2018-17663

Name of the Vulnerable Software and Affected Versions Joomla! component Zh YandexMap version 6.2.1.0 Description The issue exists due to SQL Injection in the Zh YandexMap component for Joomla!. This occurs via the id parameter in a "task=getPlacemarkDetails" request. Recommendations For version...

PT-2018-17646

Name of the Vulnerable Software and Affected Versions Joomla! Zh GoogleMap version 8.4.0.0 Description The issue exists due to SQL Injection in the Zh GoogleMap component for Joomla!. This occurs via the id parameter in specific requests, including "getPlacemarkDetails", "getPlacemarkHoverText",...

CVE-2018-6604: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...