{"uuid": "096ca9e4-5fc1-48ad-b2ea-aaf37ab5e604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-7228", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_akeeba_unserialize.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Johannes Dahse\", \"us3r777 \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Joomla! through 2.5.25, 3.2.5 and earlier\\n          3.x versions and 3.3.0 through 3.3.4 versions. The vulnerability affects the Akeeba\\n          component, which is responsible for Joomla! updates. Nevertheless it is worth to note\\n          that this vulnerability is only exploitable during the update of the Joomla! CMS.\", \"disclosure_date\": \"2014-09-29\", \"fullname\": \"exploit/unix/webapp/joomla_akeeba_unserialize\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Joomla Akeeba Kickstart Unserialize Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/joomla_akeeba_unserialize.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/joomla_akeeba_unserialize\", \"references\": [\"CVE-2014-7228\", \"URL-http://developer.joomla.org/security/595-20140903-core-remote-file-inclusion.html\", \"URL-https://www.akeebabackup.com/home/news/1605-security-update-sep-2014.html\", \"URL-http://websec.wordpress.com/2014/10/05/joomla-3-3-4-akeeba-kickstart-remote-code-execution-cve-2014-7228/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Joomla < 2.5.25 / Joomla 3.x < 3.2.5 / Joomla 3.3.0 < 3.3.4\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.235479Z"}