CVE-2018-14729 The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.
HighCVSS 8.8
EPSS 10.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comsenz discuz | >= 1.5, <= 2.5 | No fix listed |
| comsenz discuz | >= 3.0, <= 3.4 | No fix listed |
References
- discuz.com vendor-advisory
- tencent.com vendor-advisory
- www.cnvd.org.cn third-party-advisory
- github.com exploit third-party-advisory