CVE-2014-7228

Joomla! Component Akeeba Kickstart - Unserialize Remote Code Execution

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0 through 2.4.4; and CMS Update 1.0.a1 through 1.0.1, when performing a backup or update for an archive, does not delete parameters from $_GET and $_POST when it is cleansing $_REQUEST, but later accesses $_GET and $_POST using the getQueryParam function, which allows remote attackers to bypass encryption and execute arbitrary code via a command message that extracts a crafted archive.

Akeeba Restore (restore.php), utilizado en Joomla! 2.5.4 hasta 2.5.25, 3.x hasta 3.2.5, y 3.3.0 hasta 3.3.4; Akeeba Backup para Joomla! Professional 3.0.0 hasta 4.0.2; Backup Professional para WordPress 1.0.b1 hasta 1.1.3; Solo 1.0.b1 hasta 1.1.2; Admin Tools Core and Professional 2.0.0 hasta 2.4.4; y CMS Update 1.0.a1 hasta 1.0.1, cuando realiza una copia de seguridad o una actualización para un archivo, no elimina parámetros de $_GET y $_POST cuando está limpiando $_REQUEST, pero posteriormente accede a $_GET y $_POST utilizando la función getQueryParam, lo que permite a atacantes remotos evadir la codificación y ejecutar código arbitrario a través de un mensaje de comando que extrae un archivo manipulado.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-09-29 CVE Reserved
2014-10-21 CVE Published
2014-10-21 First Exploit
2024-08-06 CVE Updated
2024-11-01 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-310: Cryptographic Issues

CAPEC

References (4)

URL	Tag	Source

URL	Date	SRC
https://www.exploit-db.com/exploits/35033	2014-10-21
http://websec.wordpress.com/2014/10/05/joomla-3-3-4-akeeba-kickstart-remote-code-execution-cve-2014-7228	2024-08-06

URL	Date	SRC

URL	Date	SRC
http://developer.joomla.org/security/595-20140903-core-remote-file-inclusion.html	2016-05-09
https://www.akeebabackup.com/home/news/1605-security-update-sep-2014.html	2016-05-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.4 Search vendor "Joomla" for product "Joomla\!" and version "2.5.4"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.5 Search vendor "Joomla" for product "Joomla\!" and version "2.5.5"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.6 Search vendor "Joomla" for product "Joomla\!" and version "2.5.6"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.7 Search vendor "Joomla" for product "Joomla\!" and version "2.5.7"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.8 Search vendor "Joomla" for product "Joomla\!" and version "2.5.8"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.9 Search vendor "Joomla" for product "Joomla\!" and version "2.5.9"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.10 Search vendor "Joomla" for product "Joomla\!" and version "2.5.10"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.11 Search vendor "Joomla" for product "Joomla\!" and version "2.5.11"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.12 Search vendor "Joomla" for product "Joomla\!" and version "2.5.12"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.13 Search vendor "Joomla" for product "Joomla\!" and version "2.5.13"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.14 Search vendor "Joomla" for product "Joomla\!" and version "2.5.14"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.15 Search vendor "Joomla" for product "Joomla\!" and version "2.5.15"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.16 Search vendor "Joomla" for product "Joomla\!" and version "2.5.16"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.17 Search vendor "Joomla" for product "Joomla\!" and version "2.5.17"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.18 Search vendor "Joomla" for product "Joomla\!" and version "2.5.18"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.19 Search vendor "Joomla" for product "Joomla\!" and version "2.5.19"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.20 Search vendor "Joomla" for product "Joomla\!" and version "2.5.20"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.21 Search vendor "Joomla" for product "Joomla\!" and version "2.5.21"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.22 Search vendor "Joomla" for product "Joomla\!" and version "2.5.22"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.23 Search vendor "Joomla" for product "Joomla\!" and version "2.5.23"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.24 Search vendor "Joomla" for product "Joomla\!" and version "2.5.24"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				2.5.25 Search vendor "Joomla" for product "Joomla\!" and version "2.5.25"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.0.0 Search vendor "Joomla" for product "Joomla\!" and version "3.0.0"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.0.1 Search vendor "Joomla" for product "Joomla\!" and version "3.0.1"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.0.2 Search vendor "Joomla" for product "Joomla\!" and version "3.0.2"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.0.3 Search vendor "Joomla" for product "Joomla\!" and version "3.0.3"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.0.4 Search vendor "Joomla" for product "Joomla\!" and version "3.0.4"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.1.0 Search vendor "Joomla" for product "Joomla\!" and version "3.1.0"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.1.1 Search vendor "Joomla" for product "Joomla\!" and version "3.1.1"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.1.2 Search vendor "Joomla" for product "Joomla\!" and version "3.1.2"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.1.3 Search vendor "Joomla" for product "Joomla\!" and version "3.1.3"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.1.4 Search vendor "Joomla" for product "Joomla\!" and version "3.1.4"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.1.5 Search vendor "Joomla" for product "Joomla\!" and version "3.1.5"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.1.6 Search vendor "Joomla" for product "Joomla\!" and version "3.1.6"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.2.0 Search vendor "Joomla" for product "Joomla\!" and version "3.2.0"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.2.1 Search vendor "Joomla" for product "Joomla\!" and version "3.2.1"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.2.2 Search vendor "Joomla" for product "Joomla\!" and version "3.2.2"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.2.3 Search vendor "Joomla" for product "Joomla\!" and version "3.2.3"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.2.4 Search vendor "Joomla" for product "Joomla\!" and version "3.2.4"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.2.5 Search vendor "Joomla" for product "Joomla\!" and version "3.2.5"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.3.0 Search vendor "Joomla" for product "Joomla\!" and version "3.3.0"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.3.1 Search vendor "Joomla" for product "Joomla\!" and version "3.3.1"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.3.2 Search vendor "Joomla" for product "Joomla\!" and version "3.3.2"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.3.3 Search vendor "Joomla" for product "Joomla\!" and version "3.3.3"		-		Affected
Joomla Search vendor "Joomla"		Joomla\! Search vendor "Joomla" for product "Joomla\!"				3.3.4 Search vendor "Joomla" for product "Joomla\!" and version "3.3.4"		-		Affected