CVE-2017-15966

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Zh YandexMap component version 6.1.1.0 for Joomla! is vulnerable to SQL Injection via the placemarklistid parameter in index.php.

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update the component to the latest version and to validate and sanitize input data in the application.

Original NVD description (English source)

The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.