CVE-2018-14729

The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.

Affected products

Discuzx

Comsenz Discuz\!

≤ 2.5, 3.4

Fix

Available

CVSS 2.0

9.0 HIGH

CVSS 3.1

8.8 HIGH

EPSS

10.6% (96th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2019-05-22