Joomla ZHYandexMap 8.0.0.2 Database Disclosure

Exploit Title : Joomla ZHYandexMap Components 8.0.0.2 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : joomla.org Software Information Link : extensions.joomla.org/extension/zh-yandexmap/ Software Download Link :...

PT-2017-14320

Name of the Vulnerable Software and Affected Versions com zhyandexmap version 6.1.1.0 Description The issue allows SQL Injection via the placemarklistid parameter to the "index.php" endpoint. Recommendations For version 6.1.1.0, avoid using the placemarklistid parameter in the affected endpoint...