CVE-2026-105296

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed...

EUVD-2026-116707

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed...

CVE-2026-105296

Multiple Akeeba products are vulnerable to Cross-Site Request Forgery (CSRF) because they lack anti-CSRF checks on certain actions. An attacker could perform unintended operations if a logged-in user visits a malicious webpage. No specific exploit information or remediation steps are provided in ...

Akeeba Backup Installer - Exposure Detection

Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Akeeba Backup is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

EUVD-2014-7100

Malware in sbrugna...

Akeeba LoginGuard,3.1.1 and all lower versions,Information Disclosure

Akeeba LoginGuard,3.1.1 and all lower versions,Information Disclosure Update via developers website...

Joomla Akeeba Backup 6.3.3 Database Disclosure

Exploit Title : Joomla Akeeba Backup Components 6.3.3 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepage : akeebabackup.com Software Information Link : extensions.joomla.org/extension/akeeba-backup/ Software Download...

Information Disclosure Vulnerability in Joomla Akeeba Backup Component

Joomla is an open source content management system CMS. akeeba is Joomla extensive open source backup components . Joomla Akeeba backup component has an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive database information...

Joomla Akeeba Backup Component Database Disclosure Vulnerability

Joomla is an open source content management system CMS. A database disclosure vulnerability exists in the Joomla Akeeba Backup component. An attacker can exploit the vulnerability to obtain sensitive database information...

Admin Tools Pro, 5.0.2, Information Disclosure

Admin Tools Pro by Akeeba, versions 5.0.2 and previous, Information Disclosure Resolution: update to 5.1.0 Update notice: https://www.akeebabackup.com/news/1693-admin-tools-security-bulletin-may-2018.html...

Akeeba Backup, 5.5.1, various issues

Akeeba Backup, versions 5.5.1 and previous, various issues see developer's site for details Resolution: update to 5.5.2 Update notice: https://www.akeebabackup.com/component/ars/?view=Itemsid=2732...

Joomla Akeeba Backup 5.2.5 Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Akeeba Backup 5.2.5 - Directory Traversal Date: 2017-03-07 Home : https://extensions.joomla.org/extensions/extension/access-a-security/site-security/akeeba-backup/ Version : Akeeba Backup Core 5.3.0.b1 2017-02-2...

Joomla Akeeba Backup 5.2.5 Directory Traversal

Exploit Title: Joomla Component Akeeba Backup 5.2.5 - Directory Traversal Date: 2017-03-07 Home : https://extensions.joomla.org/extensions/extension/access-a-security/site-security/akeeba-backup/ Version : Akeeba Backup Core 5.3.0.b1 2017-02-22 Exploit Author: Persian Hack Team Discovered by :...

Joomla Akeeba Kickstart Unserialize Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'json' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include...

CVE-2014-7228

Akeeba Restore restore.php, as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0...

Code injection

Akeeba Restore restore.php, as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0...

CVE-2014-7228

CVE-2014-7228 affects multiple Joomla! related products (notably Akeeba Kickstart/Restore components and related tools) where, during backup or archive update cleansing, parameters are not removed from $_GET/$_POST and are later accessed via getQueryParam. This allows a remote attacker to bypass ...

CVE-2014-7228

Akeeba Restore restore.php, as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0...

CVE-2014-7228

Akeeba Restore restore.php, as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0...

PT-2014-7844

Name of the Vulnerable Software and Affected Versions Akeeba Restore versions 2.5.4 through 2.5.25 Akeeba Restore versions 3.x through 3.2.5 Akeeba Restore versions 3.3.0 through 3.3.4 Akeeba Backup for Joomla! Professional versions 3.0.0 through 4.0.2 Backup Professional for WordPress versions...