PT-2017-16395

Name of the Vulnerable Software and Affected Versions b2j contact extension versions prior to 2.1.13 Description The issue allows prediction of a uniqid value based on knowledge of a time value, making it easier to read arbitrary uploaded files. Recommendations For versions prior to 2.1.13, updat...

PT-2017-16396

Name of the Vulnerable Software and Affected Versions b2j contact extension versions prior to 2.1.13 Description The issue allows a rename attack to bypass a "safe file extension" protection mechanism, leading to remote code execution. Recommendations For versions prior to 2.1.13, update to versi...

PT-2017-18654

Name of the Vulnerable Software and Affected Versions b2j contact extension versions prior to 2.1.13 Description The issue allows a directory traversal attack, bypassing a uniqid protection mechanism. This makes it easier to read arbitrary uploaded files. Recommendations For versions prior to...