← back
CVE-2006-4208

CVE-2006-4208

EPSS 11.8%
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/28382unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/21486http://securityreason.com/securityalert/1401https://exchange.xforce.ibmcloud.com/vulnerabilities/28375http://trac.wordpress.org/changeset/4095http://www.securityfocus.com/archive/1/443181/100/0/threadedhttp://www.securityfocus.com/bid/19504http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/http://www.vupen.com/english/advisories/2006/3280