NVD

Id
34649  
Name
CVE-2014-7228  
Description
Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0 through 2.4.4; and CMS Update 1.0.a1 through 1.0.1, when performing a backup or update for an archive, does not delete parameters from $_GET and $_POST when it is cleansing $_REQUEST, but later accesses $_GET and $_POST using the getQueryParam function, which allows remote attackers to bypass encryption and execute arbitrary code via a command message that extracts a crafted archive.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-03  
Modified Date
2016-05-09  
Seq
2014-7228  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178632 34649 CVE-2014-7228 http://developer.joomla.org/security/595-20140903-core-remote-file-inclusion.html  View
178633 34649 CVE-2014-7228 http://websec.wordpress.com/2014/10/05/joomla-3-3-4-akeeba-kickstart-remote-code-execution-cve-2014-7228/  View
178634 34649 CVE-2014-7228 https://www.akeebabackup.com/home/news/1605-security-update-sep-2014.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16335 JVNDB-2014-005210 複数の製品で使用される Akeeba 製品 における暗号化を回避される脆弱性 Joomla! で使用される Akeeba Restore (restore.php)、Joomla! Professional 用 Akeeba Backup、WordPress 用 Backup Professional、Admin Tools Core and Professional、および CMS Update は、アーカイブのバックアップ、またはアップデートを行う際、$_REQUESTをクレンジングし、$_GET および $_POST からパラメータを削除しないため、getQueryParam 関数を使用し、$_GET および $_POST にアクセスされてしまうため、暗号化を回避し、任意のコードを実行される脆弱性が存在します。 CVE-2014-7228 74521 CVE-2014-7228 34649 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005210.html 2014-09-30 2014-11-06 View