PT-2020-6756

Name of the Vulnerable Software and Affected Versions Joomla Component GMapFP version J3.30pro Description The issue is related to insecure permissions in the GMapFP Joomla component. An attacker can access the upload function without authentication and upload files due to unrestricted file...

CVE-2020-23972: Unrestricted Upload of File with Dangerous Type

In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...

PT-2020-15607

Name of the Vulnerable Software and Affected Versions Joomla Component GMapFP versions J3.5 and J3.5free Description The issue allows an attacker to access the upload function without authenticating to the application. It also enables the upload of files due to unrestricted file uploads. This can...