EUVD-2017-14321

Malware in sbrugna...

CVE-2017-5215

The Codextrous B2J Contact aka b2jcontact extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution...

Remote code execution

The Codextrous B2J Contact aka b2jcontact extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution...

CVE-2017-5215

The Codextrous B2J Contact aka b2jcontact extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution...

PT-2017-16396

Name of the Vulnerable Software and Affected Versions b2j contact extension versions prior to 2.1.13 Description The issue allows a rename attack to bypass a "safe file extension" protection mechanism, leading to remote code execution. Recommendations For versions prior to 2.1.13, update to versi...

Code injection

PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension such as .jpg and then invoking the duplicate function to change to the .php extension...