CVE-2018-14729: Comsenz Discuz!

High severity, CVSS 8.8. EPSS: 10.4% chance of exploitation in the next 30 days.

The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.

Affected products

  • Comsenz Discuz!: from 1.5, up to and including 2.5; from 3.0, up to and including 3.4

Published 2019-05-22. Last modified 2026-06-17.