{"id":"CVE-2014-7228","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-7228","generatedAt":"2026-11-05T06:44:09.509Z","title":"Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0 through 2.4.4; and CMS Update 1.0.a1 through 1.0.1, when performing a backup or update for an…","description":"Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0 through 2.4.4; and CMS Update 1.0.a1 through 1.0.1, when performing a backup or update for an archive, does not delete parameters from $_GET and $_POST when it is cleansing $_REQUEST, but later accesses $_GET and $_POST using the getQueryParam function, which allows remote attackers to bypass encryption and execute arbitrary code via a command message that extracts a crafted archive.","published":"2014-11-03T22:55:08.000Z","lastModified":"2026-06-17T00:14:36.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":7.5,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"cwe":["CWE-310"],"affected":["joomla/joomla\\!"],"epss":{"score":0.55404,"percentile":0.99036,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2014-10-21","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":35033,"kind":"exploit","title":"Joomla! Component Akeeba Kickstart - Unserialize Remote Code Execution (Metasploit)","url":"https://www.exploit-db.com/exploits/35033","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/remote/35033.rb","file":"exploits/php/remote/35033.rb","published":"2014-10-21","added":"2014-10-21","updated":"2014-10-21","author":"Metasploit","type":"remote","platform":"php","port":80,"verified":true,"codes":["CVE-2014-7228","OSVDB-112407"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 55.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://developer.joomla.org/security/595-20140903-core-remote-file-inclusion.html","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://websec.wordpress.com/2014/10/05/joomla-3-3-4-akeeba-kickstart-remote-code-execution-cve-2014-7228/","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"https://www.akeebabackup.com/home/news/1605-security-update-sep-2014.html","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/595-20140903-core-remote-file-inclusion.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websec.wordpress.com/2014/10/05/joomla-3-3-4-akeeba-kickstart-remote-code-execution-cve-2014-7228/","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.akeebabackup.com/home/news/1605-security-update-sep-2014.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-7228","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}