Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2017-15966

The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Zh Yandexmap Project
Products
Zh Yandexmap
CVE-2018-6604

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Zh Yandexmap Project
Products
Zh Yandexmap