CVE-2011-4342 BackWPup <= 1.7.1 - Remote File Inclusion
HighCVSS 7.5
EPSS 10.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| backwpup | <= 1.7.1 | No fix listed |
| wordpress backwpup(WordPress) | < 1.7.2 | 1.7.2 |
References
- packetstormsecurity.org exploit
- 20110328 Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability - SOS-11-003 exploit mailing-list
- 43565 third-party-advisory vendor-advisory
- wordpress.org
- 17056 exploit
- [oss-security] 20111122 RE: Fwd: Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability - SOS-11-003 exploit mailing-list
- [oss-security] 20111122 Fwd: Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability - SOS-11-003 exploit mailing-list
- 71481 exploit vdb-entry
- www.senseofsecurity.com.au exploit url-repurposed
- Wordfence Intelligence third-party-advisory
- www.cve.org