high7.8Public exploit code
CVE-2018-10063
The Convert Forms extension before 2.0.4 for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection)2018-04-12 · webapps · php
Impact
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Convert Forms Project | Convert Forms | before 2.0.4 |
References
- NVD record
- CVE.org record
- https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/
- https://www.exploit-db.com/exploits/44447/
- https://www.tassos.gr/blog/convert-forms-2-0-4-security-release
- https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/
- https://www.exploit-db.com/exploits/44447/
- https://www.tassos.gr/blog/convert-forms-2-0-4-security-release