- 
						Forum
			
		
 
					 
			- 
				GMapFP
				
			
 
					 
			- 
				Security issues
				
			
 
					 
			- 
				GMapFP in the Joomla Vulnerable Extensions List
				
			
 
		
	
	
	
						GMapFP in the Joomla Vulnerable Extensions List		
	
	
	
		
	
	
	
	
	
		
		
				
		- 
			webilicious
		
 
							- 
													Auteur du sujet
											
 
		
		
					- 
				Visiteur			
 
		
					- 
				
			 
		
			
		 
		
			
	
						il y a 9 ans 7 mois				#4172
		par webilicious
	
	
		
			
			
				Hi,
Thanks for the free version of GMapFP which I love and have been using for a while on a client website.
I noticed that GMapFP  J3.38F has been listed on the Vulnerable Extensions List at 
vel.joomla.org/live-vel/1829-gmapfp-j3-3...formation-disclosure
I am using version 9.44 on Joomla 2.5. Is this version also affected?
Is there anything I need to do to make the website secure?
Thanks,
Neil.			
 
					 
	 
			 Connexion  ou Créer un compte pour participer à la conversation.
	
		
			 		
													 
	 
	
		
				
	
		Réduire
		Plus d'informations
		
			
									- 
						Messages : 1929					
 
				
				
									- 
						Remerciements reçus 267					
 
				
				
				
									- 
											
 
				
									- 
											
 
				
				
									- 
											
 
				
									- 
											
 
				
				
							
		 
	 
		 
		
			
	
						il y a 9 ans 7 mois				#4173
		par gmapfp
	
	
		
			
			
				Hi,
There are not vulnerability !
The message of the JED is :
A JED team member has sent you the following message
Hello,
your listing has been unpublished due to several issues.
1) VEL listing: https://vel.joomla.org/live-vel/1829-gmapfp-j3-38f-information-disclosure
2) inserting adsense into a form fundtion (admin cpanel)
3) linking to several sites owned by the developr that would appear not to be OSM compliant regarding name use two files affected are form.php and view.html. 
Kind regards,
Luca
 			 
					 
	 
	
		Les utilisateur(s) suivant ont remercié: webilicious 	
			 Connexion  ou Créer un compte pour participer à la conversation.
	
		
			 		
													 
	 
	
		
				
		- 
			webilicious
		
 
							- 
													Auteur du sujet
											
 
		
		
					- 
				Visiteur			
 
		
					- 
				
			 
		
			
		 
		
			
	
						il y a 9 ans 7 mois				#4175
		par webilicious
	
	
		
			
			
				Thanks for the clarification.
I'm still not sure why they have listed GMapFP in the VEL if it's not vulnerable!
If there was a genuine vulnerability I would expect more detail in the VEL listing but so far the listing is tagged with "Information Disclosure" and that is all.			
					 
	 
			 Connexion  ou Créer un compte pour participer à la conversation.
	
		
			 		
													 
	 
	
		
				
		- 
			caeos
		
 
							- 
															
 
		
		
					- 
				Visiteur			
 
		
					- 
				
			 
		
			
		 
		
	 
	
		
				
		- 
			drweb
		
 
							- 
															
 
		
		
					- 
				Visiteur			
 
		
					- 
				
			 
		
			
		 
		
	 
	
		
				
	
		Réduire
		Plus d'informations
		
			
									- 
						Messages : 1929					
 
				
				
									- 
						Remerciements reçus 267					
 
				
				
				
									- 
											
 
				
									- 
											
 
				
				
									- 
											
 
				
									- 
											
 
				
				
							
		 
	 
		 
		
			
	
						il y a 9 ans 6 mois				#4208
		par gmapfp
	
	
		
			
			
				Hi,
There are a potential vulnerability on the uploading of picture in the submission form and in admin.
I will solve it in the next days.			
					 
	 
	
		Les utilisateur(s) suivant ont remercié: webilicious 	
			 Connexion  ou Créer un compte pour participer à la conversation.
	
		
			 		
													 
	 
 
	
		
	
	
	
	
	
	
 
	
		- 
						Forum
			
		
 
					 
			- 
				GMapFP
				
			
 
					 
			- 
				Security issues
				
			
 
					 
			- 
				GMapFP in the Joomla Vulnerable Extensions List
				
			
 
		
	
	
	
	
		Temps de génération de la page : 0.076 secondes