9.8
CVSSv3

CVE-2017-5215

Published: 17/05/2017 Updated: 26/05/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The Codextrous B2J Contact (aka b2j_contact) extension prior to 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.

Vulnerable Product Search on Vulmon Subscribe to Product

codextrous b2j contact

Exploits

Joomla Codextrous B2jcontact component version 2117 suffers from a remote shell upload vulnerability ...