CVE-2007-5800 BackUpWordPress <= 0.4.2b - Remote File Inclusion
MediumCVSS 6.8
EPSS 36.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress backupwordpress(WordPress) | < 0.4.3 | 0.4.3 |
| tom willmot backupwordpress plugin | <= 0.4.2b | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- 38476 vdb-entry
- 38477 vdb-entry
- 38478 vdb-entry
- 38479 vdb-entry
- wordpress.designpraxis.at
- wordpress.designpraxis.at
- 26290 vdb-entry
- ADV-2007-3744 vdb-entry vendor-advisory
- backupwordpress-bkpwp-file-include(38212) vdb-entry
- 4593 exploit