CVE-2014-7228

high

Published 2014-11-03 · Modified 2026-05-06

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

8.5

Description

Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0 through 2.4.4; and CMS Update 1.0.a1 through 1.0.1, when performing a backup or update for an archive, does not delete parameters from $_GET and $_POST when it is cleansing $_REQUEST, but later accesses $_GET and $_POST using the getQueryParam function, which allows remote attackers to bypass encryption and execute arbitrary code via a command message that extracts a crafted archive.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Exploits

Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.

Exploit-DB

EDB-35033 remote php verified

Metasploit · 2014-10-21

Joomla! Component Akeeba Kickstart - Unserialize Remote Code Execution (Metasploit)

Source code queued for fetch — refresh in a moment.

Metasploit modules

exploit_unix/webapp/joomla_akeeba_unserialize rank 600

Joomla Akeeba Kickstart Unserialize Remote Code Execution

Source fetch failed: fetch_error — view the original via the link above.

Application impact

Vendor	Product	Versions
joomla	joomla\!	`2.5.4`
joomla	joomla\!	`2.5.5`
joomla	joomla\!	`2.5.6`
joomla	joomla\!	`2.5.7`
joomla	joomla\!	`2.5.8`
joomla	joomla\!	`2.5.9`
joomla	joomla\!	`2.5.10`
joomla	joomla\!	`2.5.11`
joomla	joomla\!	`2.5.12`
joomla	joomla\!	`2.5.13`
joomla	joomla\!	`2.5.14`
joomla	joomla\!	`2.5.15`
joomla	joomla\!	`2.5.16`
joomla	joomla\!	`2.5.17`
joomla	joomla\!	`2.5.18`
joomla	joomla\!	`2.5.19`
joomla	joomla\!	`2.5.20`
joomla	joomla\!	`2.5.21`
joomla	joomla\!	`2.5.22`
joomla	joomla\!	`2.5.23`
joomla	joomla\!	`2.5.24`
joomla	joomla\!	`2.5.25`
joomla	joomla\!	`3.0.0`
joomla	joomla\!	`3.0.1`
joomla	joomla\!	`3.0.2`
joomla	joomla\!	`3.0.3`
joomla	joomla\!	`3.0.4`
joomla	joomla\!	`3.1.0`
joomla	joomla\!	`3.1.1`
joomla	joomla\!	`3.1.2`
joomla	joomla\!	`3.1.3`
joomla	joomla\!	`3.1.4`
joomla	joomla\!	`3.1.5`
joomla	joomla\!	`3.1.6`
joomla	joomla\!	`3.2.0`
joomla	joomla\!	`3.2.1`
joomla	joomla\!	`3.2.2`
joomla	joomla\!	`3.2.3`
joomla	joomla\!	`3.2.4`
joomla	joomla\!	`3.2.5`
joomla	joomla\!	`3.3.0`
joomla	joomla\!	`3.3.1`
joomla	joomla\!	`3.3.2`
joomla	joomla\!	`3.3.3`
joomla	joomla\!	`3.3.4`

References

CWEs

CWE-310

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.