Joomla Codextrous B2jcontact 2.1.17 Shell Upload

Exploit Title : Joomla Codextrous ComB2jcontact Components 2.1.17 Shell Upload Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 04/01/2019 Vendor Homepage : codextrous.com/joomla-components/b2j-contact.html + extensions.joomla.org/extension/b2j-contact/ Software...

CVE-2017-5215

The Codextrous B2J Contact (aka b2j_contact ) extension for Joomla! is vulnerable to a rename attack in versions prior to 2.1.13 . This flaw allows an attacker to bypass the "safe file extension" protection mechanism, which can lead to remote code execution (RCE) . Exploitation details involve th...