EUVD-2011-4274

Malware in sbrugna...

PT-2012-1866 · WordPress · Backwpup

Name of the Vulnerable Software and Affected Versions: BackWPup plugin versions prior to 1.7.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter in the wp xml export.php file. Recommendations: For versions prior to 1.7.2, update to versi...

CVE-2011-5208: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the wpabs parameter to 1 app/options-viewlog-iframe.php or 2 app/options-runnow-iframe.php...

CVE-2011-4342: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in wpxmlexport.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter...