CVE-2011-5208

2022-10-0316:15:12

mitre

www.cve.org

cve-2011-5208

backwpup

directory traversal

remote attackers

arbitrary files

wordpress

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

JSON

Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary files via a … (dot dot) in the wpabs parameter to (1) app/options-view_log-iframe.php or (2) app/options-runnow-iframe.php.