Skip to content

CVE-2017-15966 The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.

CriticalCVSS 9.8 EPSS 3.4% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.

Affected products

ProductAffected versionsFixed in
zh yandexmap project zh yandexmap = 6.1.1.0 No fix listed

References

  • 101694 third-party-advisory vdb-entry
  • packetstormsecurity.com exploit issue-tracking third-party-advisory vdb-entry
  • 43093 exploit issue-tracking third-party-advisory vdb-entry