CVE-2018-10063 | BDVDB-2026-99298 Detail

Description#

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/44447/
https://www.tassos.gr/blog/convert-forms-2-0-4-security-release
https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/

Exploit#

https://www.exploit-db.com/exploits/44447/

History#

Version 12018-04-12Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.