WordPress BackWPup 1.6.1 Code Execution

Sense of Security - Security Advisory - SOS-11-003 Release Date. 28-Mar-2011 Last Update. - Vendor Notification Date. 25-Mar-2010 Product. Wordpress Plugin BackWPup Platform. Independent Affected versions. 1.6.1 verified, possibly others Severity Rating. High Impact. System Access Attack Vector...

WordPress BackWPup Plugin - Remote and Local Code Execution

WordPress BackWPup plugin is prone to a remote and local code execution vulnerability. The input that is passed to the component "wpxmlexport.php" via the "wpabs" variable allows the inclusion and execution of local or remote PHP files as long as a "nonce" value is known. Solution Update the plug...

WordPress Plugin BackWPup - Remote Code Execution / Local Code Execution

Sense of Security - Security Advisory - SOS-11-003 Release Date. 28-Mar-2011 Last Update. - Vendor Notification Date. 25-Mar-2010 Product. Wordpress Plugin BackWPup Platform. Independent Affected versions. 1.6.1 verified, possibly others Severity Rating. High Impact. System Access Attack Vector...

WordPress BackWPup Plugin 1.4 - Multiple Information Disclosure Vulnerabilities

Because of these multiple information-disclosure vulnerabilities attackers can try to retrieve the contents of an arbitrary file. Other attacks are also possible. Solution Update the plugin...

BackWPup WordPress Plugin 1.4.0 File Content Disclosure

============================================= - Release date: Feb 28th, 2010 - Discovered by: Danilo Massa - Severity: High ============================================= I. VULNERABILITY ------------------------- BackWPup Wordpress plugin = 1.4.0 File content disclosure II. BACKGROUND...

WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities

WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/46610/info The BackWPup plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers c...

WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/46610/info The BackWPup plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to retrieve the contents of an arbitrary file. Informati...