CVE-2006-4208

EPSS 27.2%

發布日:2006/8/17修改日:2026/5/27

也稱為:DEBIAN-CVE-2006-4208

描述

Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.

受影響套件(1)

Debian/wordpressfrom 0, < 2.0.5-0.1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2006-4208