CVE-2014-10076: Exposure of Sensitive Information to an Unauthorized Actor

The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack...

PT-2018-4165

Name of the Vulnerable Software and Affected Versions wp-db-backup plugin version 2.2.4 Description The issue allows remote attackers to read backup archives via a brute-force attack due to the plugin relying on a short string for access control. Recommendations For wp-db-backup plugin version...

studio.dopetv.ng Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675904 Description| Value ---|--- Affected Website:| studio.dopetv.ng Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

WordPress EZ SQL Reports Shortcode Widget and DB Backup RCE

Remote command execution vulnerability in WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin shortcode parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WordPress EZ SQL Reports Shortcode Widget and DB Backup SQL Injection

SQL Injection vulnerability in WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin shortcode parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CVE-2015-9230

The CVE-2015-9230 entry relates to the BulletProof Security WordPress plugin. Affected component: admin/db-backup-security/db-backup-security.php. Root cause: cross-site scripting (XSS) vulnerability via the DBTablePrefix parameter in plugin versions prior to 0.52.5, exploitable by remote authent...

WordPress DB Backup Plugin 任意文件下载

No description provided by source...

WordPress DB-Backup Plugin 4.5 /download.php 任意文件下载漏洞

No description provided by source...

CVE-2014-9119

Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-9119

Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-9119

CVE-2014-9119 affects WordPress DB Backup Plugin (version 4.5 and earlier). A local file inclusion / directory traversal flaw exists in download.php, permitting an attacker to read arbitrary server files by manipulating the file parameter (e.g., via path traversal). The NUCLEI template and relate...

CVE-2014-9119: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

PT-2014-8837

Name of the Vulnerable Software and Affected Versions DB Backup plugin versions 4.5 and earlier for Wordpress Description A directory traversal issue in the download.php file of the DB Backup plugin allows remote attackers to read arbitrary files by using a .. dot dot in the file parameter...

DB Backup <= 4.5 - Path Traversal File Access

Proof of Concept: /wp-content/plugins/db-backup/download.php?file=../../../wp-config.php...

WordPress Plugin DB Backup - Arbitrary File Download

WordPress Plugin DB Backup - Arbitrary File Download |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress db-backup plugin File Download Vulnerability | | Google Dork:...

WordPress Plugin DB Backup - Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress db-backup plugin File Download Vulnerability | | Google Dork: inurl:wp-content/plugins/db-backup/ | | Date : Date: 2014-11-26 | | Exploit Autho...

PT-2017-7558

Name of the Vulnerable Software and Affected Versions BulletProof Security plugin versions prior to .52.5 Description The issue allows for XSS to be possible for remote authenticated administrators via the DBTablePrefix parameter in the admin/db-backup-security/db-backup-security.php page...

DEBIAN-CVE-2008-0193

Cross-site scripting XSS vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php...

DEBIAN-CVE-2006-5705

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...