CVE

Id
29157  
CVE No.
CVE-2007-5800  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/.  
Phase
Assigned (20071102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
305875 29157 CVE-2007-5800 MILW0RM:4593  View
305876 29157 CVE-2007-5800 URL:http://www.milw0rm.com/exploits/4593  View
305877 29157 CVE-2007-5800 CONFIRM:http://wordpress.designpraxis.at/2007/11/01/backupwordpress-security-release/  View
305878 29157 CVE-2007-5800 CONFIRM:http://wordpress.designpraxis.at/2007/11/01/security-vulnerability-in-backupwordpress/  View
305879 29157 CVE-2007-5800 BID:26290  View
305880 29157 CVE-2007-5800 URL:http://www.securityfocus.com/bid/26290  View
305881 29157 CVE-2007-5800 VUPEN:ADV-2007-3744  View
305882 29157 CVE-2007-5800 URL:http://www.vupen.com/english/advisories/2007/3744  View
305883 29157 CVE-2007-5800 OSVDB:38476  View
305884 29157 CVE-2007-5800 URL:http://osvdb.org/38476  View
305885 29157 CVE-2007-5800 OSVDB:38477  View
305886 29157 CVE-2007-5800 URL:http://osvdb.org/38477  View
305887 29157 CVE-2007-5800 OSVDB:38478  View
305888 29157 CVE-2007-5800 URL:http://osvdb.org/38478  View
305889 29157 CVE-2007-5800 OSVDB:38479  View
305890 29157 CVE-2007-5800 URL:http://osvdb.org/38479  View
305891 29157 CVE-2007-5800 XF:backupwordpress-bkpwp-file-include(38212)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54173 JVNDB-2007-002865 Firewolf Technologies Synergiser の index.php におけるディレクトリトラバーサルの脆弱性 Firewolf Technologies Synergiser の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-5802 29157 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002865.html  View