PT-2017-18654 · Joomla · B2J Contact

Published 2017-05-17 · Updated 2017-05-26 · CVE-2017-9030

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions b2j contact extension versions prior to 2.1.13

Description The issue allows a directory traversal attack, bypassing a uniqid protection mechanism. This makes it easier to read arbitrary uploaded files.

Recommendations For versions prior to 2.1.13, update to version 2.1.13 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-9030

Affected Products

B2J Contact

References · 3

• 🔥 https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt · Exploit
• https://osv.dev/vulnerability/CVE-2017-9030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9030 · Security Note