Approved changes feed: RSS · Atom

cpe:2.3:a:codextrous:b2j_contact:*:*:*:*:*:joomla\!:*:*

part: a version: * update: *

VendorCodextrous (7ae636d3-e58d-5a61-a9ec-8bf05e5c483e)
ProductB2J Contact (1f5173f2-9153-5ff9-a0fa-c3607bd8695d)
Edition*
Language*
Software edition*
Target softwarejoomla!
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9030 vulnerable 2026-06-08 05:10:09.276871 Details available
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files.
Published: 2017-05-17T14:00:00.000Z
Updated: 2024-09-16T19:15:25.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5215 vulnerable 2026-06-08 05:09:39.357111 Details available
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.
Published: 2017-05-17T14:00:00.000Z
Updated: 2024-08-05T14:55:35.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5214 vulnerable 2026-06-08 05:09:39.356716 Details available
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
Published: 2017-05-17T14:00:00.000Z
Updated: 2024-08-05T14:55:35.588Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.