Zh Yandexmap Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zh Yandexmap Project records in CISA KEV

No Zh Yandexmap Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2017-11696 CVE-2017-15966 · GHSA-mjpx-fg43-xq38

MEDIUM 48

The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03398 Published 2017-10-29 No fix listed CWE-89

TI-2018-04867 CVE-2018-6604 · GHSA-grmh-26w3-36gf

MEDIUM 47

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-02-05 No fix listed CWE-89