CVE-2014-6389

CVE-2014-6389 describes a remote command execution vulnerability in PHPCompta/NOALYSS versions prior to 6.7.2. An attacker can exploit this flaw by injecting shell metacharacters into the 'd' parameter of the backup.php script, allowing them to execute arbitrary commands on the affected server. This vulnerability carries a CVSS score of 7.5, indicating high severity with low attack complexity and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit (EDB-34861) is publicly available, though there is minimal community discussion or media coverage surrounding this CVE.