← Back

Zh Yandexmap

zh_yandexmap

Vendor: Zh Yandexmap Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-6604
1Zh Yandexmap Project
1Zh Yandexmap
Jun 17, 2026
Feb 5, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request.
CVE-2017-15966
1Zh Yandexmap Project
1Zh Yandexmap
May 13, 2026
Oct 29, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.