Beveiligingsadvies

CVE-2020-9364

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-04 15:58:23

Laatst bijgewerkt 2024-08-04 10:26:16

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactform_upload parameter. An attacker could exploit this vulnerability with the "Send me a copy" option to receive any files of the filesystem via email.

← Alle CVE's bekijken Bekijk op cve.org ↗