CVE-2017-15966

概要

参考情報

• securityfocus.com/bid/101694 · Third Party Advisory
• packetstormsecurity.com/files/144436/Joomla-Zh-YandexMap-6.1.1.0-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43093 · Exploit

zh yandexmap のその他の脆弱性

• CVE-2018-6604緊急 9.8SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request.