CVE-2018-6604

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...

CVE-2018-6604

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...

CVE-2018-6582

SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

CVE-2018-6604

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...

CVE-2018-6582

Summary: CVE-2018-6582 affects the Zh GoogleMap Joomla! extension (versions 8.4.0.0 and earlier). The vulnerability is an SQL injection in the component that can be triggered via the id parameter in requests such as getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, and getPathDetails....

CVE-2018-6605

The CVE-2018-6605 entry corresponds to a SQL Injection in the Joomla! Zh BaiduMap 3.0.0.1 component. The vulnerability is exploitable via the id parameter in several requests (getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, getPathDetails) and affects Zh BaiduMap 3.0.0.1 and earlier...

CVE-2018-6605

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

Joomla Zh YandexMap 6.2.1.0 Component - id SQL Injection Vulnerability

Exploit for php platform in category web applications input name="id" value="-11 UNION ALL SELECT...

Joomla Zh BaiduMap 3.0.0.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications input name="id" value="-11 UNION ALL SELECT...

Joomla! Component Zh GoogleMap 8.4.0.0 - SQL Injection

input name="id" value="-11 UNION ALL SELECT...

Joomla! Component Zh YandexMap 6.2.1.0 - 'id' SQL Injection

input name="id" value="-11 UNION ALL SELECT...

Joomla! Component Zh YandexMap 6.2.1.0 - id SQL Injection

Joomla! Component Zh YandexMap 6.2.1.0 - id SQL Injection input name="id" value="-11 UNION ALL SELECT...

Joomla Zh GoogleMap 8.4.0.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications input name="id" value="-11 UNION ALL SELECT...

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection input name="id" value="-11 UNION ALL SELECT...

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

input name="id" value="-11 UNION ALL SELECT...

zh-cn.facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-449825 Description| Value ---|--- Affected Website:| zh-cn.facebook.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

ZhandexMap component SQL injection vulnerability in Joomla!

Zh YandexMap aka comzhyandexmap component is a component used in Joomla! to distribute maps through the Yandex Maps service. A SQL injection vulnerability exists in version 6.1.1.0 of the Joomla! Zh YandexMap component. A remote attacker can exploit the vulnerability by sending SQL injection...

Joomla Zh YandexMap 6.1.1.0 Component- placemarklistid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Zh YandexMap 6.1.1.0 - SQL Injection Vendor Homepage: http://zhuk.cc/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/zh-yandexmap/ Demo:...

Joomla! Component Zh YandexMap 6.1.1.0 - 'placemarklistid' SQL Injection

Exploit Title: Joomla! Component Zh YandexMap 6.1.1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://zhuk.cc/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/zh-yandexmap/ Demo: http://joomla.zhuk.cc/index.php Version: 6.1.1.0...

Joomla! Component Zh YandexMap 6.1.1.0 - placemarklistid SQL Injection

Joomla! Component Zh YandexMap 6.1.1.0 - placemarklistid SQL Injection Exploit Title: Joomla! Component Zh YandexMap 6.1.1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://zhuk.cc/ Software Link:...