This host is running with WordPress myEASYbackup Plugin and is prone to directory traversal vulnerability.

Successful exploitation could allow attackers to read arbitrary files via directory traversal attacks and gain sensitive information. Impact Level: Application

Upgrade to WordPress myEASYbackup Plugin version 1.0.9 or later. For updates refer to http://wordpress.org/extend/plugins/myeasybackup/

The flaw is due to an input validation error in 'dwn_file' parameter to 'wp-content/plugins/myeasybackup/meb_download.php', which allows attackers to read arbitrary files via a ../(dot dot) sequences.

WordPress myEASYbackup Plugin version 1.0.8.1

• http://forums.cnet.com/7726-6132_102-5261356.html
• http://packetstormsecurity.org/files/108711/wpmyeasybackup-traversal.txt
• http://secunia.com/advisories/47594
• http://www.securelist.com/en/advisories/47594

---

Updated on 2015-03-25