|
|
CVE Reference: CVE-2006-4208 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-4208 |
|
|
Description: Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/28375 SREASON http://securityreason.com/securityalert/1401 SAID Secunia Advisory: SA21486 CONFIRM http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/ http://trac.wordpress.org/changeset/4095 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/443181/100/0/threaded BID 19504 |
|
| Return to the previous page. |
