CVE-2020-9364

An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactformupload parameter. An attacker could exploit this...

PT-2020-20612 · Creative · Creative Contact Form

Name of the Vulnerable Software and Affected Versions: Creative Contact Form extension versions 4.6.2 and earlier Description: A directory traversal issue resides in the filename field for uploaded attachments via the creativecontactform upload parameter in the helpers/mailer.php file. This allow...