Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Joomla! Codextrous B2J Contact扩展安全漏洞
Vulnerability Description
Joomla!是美国Open Source Matters团队开发的一套开源的内容管理系统(CMS)，该系统提供RSS馈送、网站搜索等功能。Codextrous B2J Contact(又名b2j_contact)是其中的一个用于创建联系人表单的插件。 Joomla! Codextrous B2J Contact扩展2.1.13之前的版本中存在安全漏洞。攻击者可利用该漏洞读取任意的上传文件。
CVSS Information
N/A
Vulnerability Type
N/A