CVE-2006-4208
NoneCVSS
—
EPSS
12.1%
Published
Aug 17, 2006
CISA due date
—
The record
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | wordpress | 0 | 2.0.5-0.1 |
| Debian:11 | wordpress | 0 | 2.0.5-0.1 |
| Debian:12 | wordpress | 0 | 2.0.5-0.1 |
| Debian:13 | wordpress | 0 | 2.0.5-0.1 |
Related vulnerabilities
- CVE-2023-2745 WordPress Core is vulnerable to Directory Traversal in versions up to, and including… Also affects wordpress
- CVE-2008-7220 Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2… Also affects wordpress
- CVE-2009-2762 wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password… Also affects wordpress
- CVE-2009-2335 WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login… Also affects wordpress
- CVE-2008-5695 wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does… Also affects wordpress
- CVE-2007-0233 wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when… Also affects wordpress
- CVE-2006-2667 Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote… Also affects wordpress
- CVE-2005-2612 Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote… Also affects wordpress