Description

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request.

Remediation

References

CVE-2006-5705

Related Vulnerabilities

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11111)

Grafana Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2022-39328)

MySQL Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Vulnerability (CVE-2020-5258)

YOURLS Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2019-14537)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4938)

Severity

Medium

Classification

CVE-2006-5705

Tags

Missing Update Known Vulnerabilities