CVE-2018-10063

Sažetak

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.

Reference

https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/
https://www.exploit-db.com/exploits/44447/
https://www.tassos.gr/blog/convert-forms-2-0-4-security-release

CVSS

Base:	6.8
Impact:	6.4
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

03-10-2019 - 00:03

Objavljeno

12-04-2018 - 19:29