CVE Catalog
CVE-2017-5215
CriticalSummary
The Codextrous B2J Contact (b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a 'safe file extension' protection mechanism, leading to remote code execution.
Risk Assessment
An attacker could exploit this vulnerability to remotely execute code on the server, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update the Codextrous B2J Contact extension to version 2.1.13 or later to mitigate this vulnerability.
Original NVD description (English source)
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.