Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2017-9030

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Joomla!是美国Open Source Matters团队开发的一套开源的内容管理系统(CMS)，该系统提供RSS馈送、网站搜索等功能。Codextrous B2J Contact(又名b2j_contact)是其中的一个用于创建联系人表单的插件。 Joomla! Codextrous B2J Contact扩展2.1.13之前的版本中存在安全漏洞。攻击者可利用该漏洞绕过uniqid保护机制，读取上传的文件。

AI Predicted 7.5 Difficulty: Easy EPSS 1.81% · P77
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-9030

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Joomla! Codextrous B2J Contact扩展安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Joomla!是美国Open Source Matters团队开发的一套开源的内容管理系统(CMS)，该系统提供RSS馈送、网站搜索等功能。Codextrous B2J Contact(又名b2j_contact)是其中的一个用于创建联系人表单的插件。 Joomla! Codextrous B2J Contact扩展2.1.13之前的版本中存在安全漏洞。攻击者可利用该漏洞绕过uniqid保护机制，读取上传的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2017-9030

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-9030

请登录查看更多情报信息。

Other References for CVE-2017-9030 (1)

Same Patch Batch · n/a · 2017-05-17 · 13 CVEs total

CVE-2017-8917 Joomla! SQL注入漏洞
CVE-2016-10374 Perltidy 安全漏洞
CVE-2017-9031 Deluge WebUI 路径遍历漏洞
CVE-2015-3998 WordPress adsense-click-fraud-monitoring phpwhois 跨站脚本漏洞
CVE-2015-4070 WordPress Wow Moodboard Lite插件安全漏洞
CVE-2016-3403 Zimbra Collaboration 跨站请求伪造漏洞
CVE-2017-5214 Joomla! Codextrous B2J Contact扩展安全漏洞
CVE-2017-5215 Joomla! Codextrous B2J Contact扩展安全漏洞
CVE-2017-8422 KDE kdeLibs和KAuth 安全漏洞
CVE-2017-8849 Smb4K 安全漏洞
CVE-2017-9025 HooToo Trip Mate 6 vshttpd 缓冲区错误漏洞
CVE-2017-9026 HooToo Trip Mate 6 vshttpd 缓冲区错误漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2017-9030

No comments yet

Leave a comment