← Back

Codextrous

codextrous

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
B2j Contact
b2j_contact
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-9030
1Codextrous
1B2j Contact
May 13, 2026
May 17, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files.
CVE-2017-5215
1Codextrous
1B2j Contact
May 13, 2026
May 17, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.
CVE-2017-5214
1Codextrous
1B2j Contact
May 13, 2026
May 17, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.