Sql injection

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...