CVE-2018-14729

The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-05-22

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Discuz! (Comsenz)

References

• http://discuz.com
• http://tencent.com
• http://www.cnvd.org.cn/flaw/show/CNVD-2018-17059
• https://github.com/FoolMitAh/CVE-2018-14729/blob/master/Discuz_backend_getshell.md