CVE-2014-7228

Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0 through 2.4.4; and CMS Update 1.0.a1 through 1.0.1, when performing a backup or update for an archive, does not delete parameters from $_GET and $_POST when it is cleansing $_REQUEST, but later accesses $_GET and $_POST using the getQueryParam function, which allows remote attackers to bypass encryption and execute arbitrary code via a command message that extracts a crafted archive.

We have discovered 129,482 live websites that are affected by CVE-2014-7228.

Run a Free Instant Scan



Affected Software

Product  Joomla
Category Content Management System
Vulnerable Domains129,482 live websites (97% of Joomla install base)
Vulnerable Versions
  • from 0 through 2.5.25
Vulnerable Versions Count16 versions ( 12% of all versions)



Details

  • Published - Nov 3, 2014
  • Updated - Aug 6, 2024

Website Distribution by Country

Number of websites using CVE-2014-7228
United States7,136 websites


Italy36,678 websites
Russia11,574 websites
Germany7,048 websites
Kazakhstan7,016 websites
GB5,239 websites
Netherlands5,077 websites
South Africa4,611 websites
Serbia4,284 websites
Sweden3,728 websites

Website Distribution by TLD

Number of websites using CVE-2014-7228
.com28,158 websites
.it24,408 websites
.ru9,618 websites
.nl3,964 websites
.de3,670 websites
.se3,140 websites
.org3,093 websites
.cz2,965 websites
.co.uk2,766 websites
.net2,582 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2014-7228

Top websites that are affected by CVE-2014-7228. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.com Italy**,***
************.com United States**,***
************.com Germany**,***
*********************.com United States**,***
*****.org United States**,***
********.com Slovakia**,***
*****.it Italy**,***
*********.com United States**,***
******.cz Czech Republic**,***
*******.ru Russia**,***
See full domain list

FAQ

A total of 129,482 websites have been identified as vulnerable to CVE-2014-7228, based on global website indexing conducted by WebTechSurvey.
The Joomla is affected by the CVE-2014-7228 vulnerability.
Joomla versions up to and including 2.5.25 are vulnerable to CVE-2014-7228.