PT-2022-25966

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The backup module has a path traversal vulnerability, which can be exploited to gain unauthorized access to other system files on the system. Recommendations At the moment, there is n...

Huawei HarmonyOS 路径遍历漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a path traversal vulnerability in the backup module. An attacker can exploit the...

CVE-2021-45794

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

Sql injection

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

CVE-2021-45794

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

Microweber remote code execution vulnerability

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A remote code execution vulnerability exists in versions of microweber prior to 1.2.12, which...

Microweber 代码问题漏洞

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A remote code execution vulnerability exists in versions of microweber prior to 1.2.12, which...

Abusing Backup/Restore feature to achieve Remote Code Execution

Description Admin can use Backup modules to upload a malicious PHP file, which can lead to RCE. Proof of Concept + Log in as admin, navigate to Modules - Backup: https://demo.microweber.org/demo/admin/view:modules/loadmodule:adminbackup + Prepare a malicious PHP file, in this case info2.php +...

CVE-2011-4322

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

Design/Logic Flaw

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

CVE-2011-4322

Technical details about CVE-2011-4322 are not publicly available in the provided connected documents. The materials only reiterate an authentication error in websitebaker's backup module through version 2.8.1. Monitor for updates.

CVE-2011-4322

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

CVE-2011-4322: Missing Authentication for Critical Function

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

PT-2020-7136

Name of the Vulnerable Software and Affected Versions websitebaker versions prior to and including 2.8.1 Description The issue is related to an authentication error in the backup module. Recommendations For versions prior to and including 2.8.1, update to a version later than 2.8.1 to resolve the...

CVE-2019-16896

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...

Design/Logic Flaw

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...

Command injection

app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host...

CVE-2019-11410

app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host...

CVE-2019-11410

app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host...

PT-2019-12295

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.4.3 Description The issue arises from a command injection vulnerability in the Backup Module of FusionPBX due to inadequate input validation. This allows authenticated administrative attackers to execute commands on the hos...