CVE-2017-5215

Published: May 17, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.

Affected (1)

Products: Codextrous: B2j Contact

Codextrous

1 product

B2j Contact

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Codextrous B2j Contact	Up to 2.1.12

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt

Source: cve@mitre.org

ExploitThird Party Advisory

https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.