Joomla Akeeba Kickstart deserialization Remote Code Execution Vulnerability

Joomla Akeeba Kickstart deserialization Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Joomla! Akeeba
Description:
CVE (CAN) ID: CVE-2014-7228

Joomla Akeeba is in charge of Joomla! The updated component.

Joomla! Versions earlier than 2.5.25, 3.2.5, and earlier versions, and 3.3.0 to 3.3.4 have security vulnerabilities. This vulnerability can only be found in Joomla! CMS is used when it is updated. This vulnerability causes remote code execution.

<* Source: vendor
*>

Suggestion:
Vendor patch:

Joomla!
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.akeebabackup.com/home/news/1605-security-update-sep-2014.html

This article permanently updates the link address: