27 matches found
Joomla! Component GMapFP 3.5 - Arbitrary File Upload
Joomla! Component GMapFP 3.5 is vulnerable to arbitrary file upload vulnerabilities. An attacker can access the upload function of the application without authentication and can upload files because of unrestricted file upload which can be bypassed by changing Content-Type & name file too double...
CVE-2020-23972
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...
The vulnerability of the GMapFP extension of the Joomla! content management system allows attackers to increase their privileges.
The vulnerability of the GMapFP extension in the Joomla! content management system is related to incorrect default access settings. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
VulnCheck KEV: CVE-2020-23972
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...
Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload
Exploit Title: Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload Google Dork: inurl:''comgmapfp'' Date: 2020-03-27 Exploit Author: ThelastVvV Vendor Homepage: https://gmapfp.org/ Version:Version J3.5 /J3.5free Tested on: Ubuntu CVE: CVE-2020-23972 Description: An attacker can...
Joomla GMapFP Component Arbitrary File Upload (CVE-2020-23972)
An arbitrary file upload vulnerability exists in Joomla GMapFP Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Component GMapFP Unauthenticated Arbitrary File Upload Vulnerability in Joomla!
Joomla! is an open source content management system CMS. A security vulnerability exists in the Joomla! component GMapFP. An attacker can exploit the vulnerability to access the application's upload functionality, upload files without authenticating the application, and bypass the issue by changi...
Joomla GMapFP J3.5 / J3.5F Arbitrary File Upload
Exploit Title: Joomla! Component GMapFP J3.5/J3.5F - Unauthenticated Arbitrary File Upload Google Dork: inurl:''comgmapfp'' Date: 2020-03-27 Exploit Author: ThelastVvV Vendor Homepage:https://gmapfp.org/ Version:Version J3.5 /J3.5free Tested on: Ubuntu CVE:CVE-2020-23972 Description: An attacker...
CVE-2020-23971
gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name...
CVE-2020-23971
gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name...
CVE-2020-23971
The CVE-2020-23971 entry concerns the gmapfp.org Joomla Component GMapFP J3.30pro, with a vulnerability described as Insecure Permissions that lets an attacker access the upload function without authentication and perform unrestricted file uploads. The root cause cited is improper permissions and...
PT-2020-6756
Name of the Vulnerable Software and Affected Versions Joomla Component GMapFP version J3.30pro Description The issue is related to insecure permissions in the GMapFP Joomla component. An attacker can access the upload function without authentication and upload files due to unrestricted file...
CVE-2020-23971: Incorrect Default Permissions
gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name...
CVE-2020-23972
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...
Unrestricted file upload
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...
CVE-2020-23972
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...
CVE-2020-23972
The Joomla Component GMapFP (Versions J3.5 and J3.5free ) is vulnerable to an unauthenticated arbitrary file upload vulnerability. An attacker can access the application's upload function without authentication and bypass file type restrictions by manipulating the Content-Type and using double ex...
PT-2020-15607
Name of the Vulnerable Software and Affected Versions Joomla Component GMapFP versions J3.5 and J3.5free Description The issue allows an attacker to access the upload function without authenticating to the application. It also enables the upload of files due to unrestricted file uploads. This can...
CVE-2020-23972: Unrestricted Upload of File with Dangerous Type
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...
