Vulnerability Details CVE-2018-6605
SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.903
EPSS Ranking 99.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2018-6605
-
cpe:2.3:a:zh_baidumap_project:zh_baidumap:3.0.0.1