CVE-2006-4208
Skippy WP-DB-Backup plugin for WordPress <= 1.7 - Authenticated Directory Traversal via Backup Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4208. PoCs published by marc & shb.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in WP-DB Backup for WordPress, allowing attackers to retrieve arbitrary files by manipulating the 'backup' parameter. The provided URL demonstrates accessing '/etc/passwd' via path traversal.
Description
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.
Exploits (1)
The exploit describes a directory traversal vulnerability in WP-DB Backup for WordPress, allowing attackers to retrieve arbitrary files by manipulating the 'backup' parameter. The provided URL demonstrates accessing '/etc/passwd' via path traversal.