CVE-2014-7228

CVE-2014-7228 describes a critical vulnerability in Akeeba Restore and related Akeeba products for Joomla and WordPress, affecting versions across multiple product lines. The flaw allows remote attackers to bypass encryption and execute arbitrary code by manipulating GET and POST parameters during backup or update operations, leading to the extraction of crafted archives. With a CVSS score of 7.5 and a FAUCET Risk Score of 96/100, this vulnerability is considered highly severe due to its network-based attack vector, low access complexity, and potential for complete compromise (confidentiality, integrity, and availability). Exploit intelligence indicates the existence of a Metasploit module (EDB-35033) for remote code execution, confirming readily available exploit code, though there is no evidence of active exploitation in the wild or significant community discussion.