CVE-2020-23972

HIGHNuclei

gmapfp gmapfp Unrestricted Upload of File with Dangerous Type

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-23972 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Apr 12, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

gmapfp

Browse gmapfp / gmapfp
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBJoomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File UploadExploitDB exploitby ThelastVvVNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHJoomla! Component GMapFP 3.5 - Arbitrary File UploadCVSS 7.5

Joomla! Component GMapFP 3.5 is vulnerable to arbitrary file upload vulnerabilities. An attacker can access the upload function of the application without authentication and can upload files because of unrestricted file upload which can be bypassed by changing Content-Type & name file too double ext.

Impact

Successful exploitation of this vulnerability can result in unauthorized remote code execution on the affected Joomla! website.

Remediation

Apply the latest security patch or update to a patched version of Joomla! Component GMapFP 3.5 to mitigate this vulnerability.

WeaknessesCWE-434
Authorsdwisiswant0
Template tagscve2020cvejoomlaedbpacketstormfileuploadintrusivegmapfpjoomla\!vkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CPE: cpe:2.3:a:gmapfp:gmapfp:j3.5:*:*:*:-:joomla\!:*:*
https://www.exploit-db.com/exploits/49129 https://raw.githubusercontent.com/me4yoursecurity/Reports/master/README.md http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html https://nvd.nist.gov/vuln/detail/CVE-2020-23972 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

3