Directory Traversal Vulnerability in Codextrous B2J Contact Extension for Joomla

Directory Traversal Vulnerability in Codextrous B2J Contact Extension for Joomla

CVE-2017-9030 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files.

Learn more about our Contact.