ZhandexMap component SQL injection vulnerability in Joomla!

Zh YandexMap aka comzhyandexmap component is a component used in Joomla! to distribute maps through the Yandex Maps service. A SQL injection vulnerability exists in version 6.1.1.0 of the Joomla! Zh YandexMap component. A remote attacker can exploit the vulnerability by sending SQL injection...

CVE-2017-15966

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...

CVE-2017-15966

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...

CVE-2017-15966

CVE-2017-15966 affects the Joomla! extension Zh YandexMap (com_zhyandexmap) version 6.1.1.0. A SQL injection vulnerability exists in the component via the placemarklistid parameter to index.php, enabling an attacker to inject SQL commands. The issue is documented across multiple sources (CNVD-201...

PT-2017-14320

Name of the Vulnerable Software and Affected Versions com zhyandexmap version 6.1.1.0 Description The issue allows SQL Injection via the placemarklistid parameter to the "index.php" endpoint. Recommendations For version 6.1.1.0, avoid using the placemarklistid parameter in the affected endpoint...

CVE-2017-15966: Improper Neutralization of Special Elements used in an SQL Command

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...