← All advisories

High severity8.8NVD Advisory· Published May 22, 2019· Updated Jun 17, 2026

CVE-2018-14729

CVE-2018-14729

Description

The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Discuz!/Discuz!description
Discuz/Discuz\!llm-fuzzy2 versions
2.5, 3.4+ 1 more
- (no CPE)range: 2.5, 3.4
- cpe:2.3:a:comsenz:discuz\!:*:*:*:*:*:*:*:*range: >=1.5,<=2.5

Patches

Vulnerability mechanics

References

4

github.com/FoolMitAh/CVE-2018-14729/blob/master/Discuz_backend_getshell.mdnvdExploitThird Party Advisory
discuz.comnvdVendor Advisory
tencent.comnvdVendor Advisory
www.cnvd.org.cn/flaw/show/CNVD-2018-17059nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.