CVE-2017-5215

The CVE entries describe the Codextrous B2J Contact (aka b2j_contact) Joomla extension up to version 2.1.13 as vulnerable. CVE-2017-5215: a rename attack allows bypass of the safe file extension protection, enabling remote code execution. CVE-2017-9030: a directory traversal flaw bypasses uniqid ...