CVE-2018-6604

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Joomla! Component Zh YandexMap 6.2.1.0 - 'id' SQL Injection2018-02-05 · webapps · php

Impact

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.exploit-db.com/exploits/43975/
• https://www.exploit-db.com/exploits/43975/