.. / CVE-2018-6605

Exploit for Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection (CVE-2018-6605)

Description:

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request.

Nuclei Template

View the template here CVE-2018-6605.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-6605.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2018-6605
https://github.com/ARPSyndicate/cvemon
https://www.exploit-db.com/exploits/43974
https://github.com/C0reL0ader/EaST/blob/master/exploits/efa_joomla_zh_baidumap_sqli.py