CVE-2006-5705

WordPress < 2.0.5 - Authenticated Directory Traversal and Arbitrary File Write via Backup and Fragment Parameters

Title source: llm

Description

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request.

References (10)

Core 10

Core References

Various Sources x_refsource_confirm

http://markjaquith.wordpress.com/2006/10/17/changes-in-wordpress-205/

Patch x_refsource_confirm

http://wordpress.org/development/2006/10/205-ronan/

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200611-10.xml

Vendor Advisory vendor-advisory x_refsource_openpkg

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.027-wordpress.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22942

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/20869

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22683

Product x_refsource_confirm

http://trac.wordpress.org/changeset/4226

Issue Tracking x_refsource_confirm

http://bugs.gentoo.org/show_bug.cgi?id=153303

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/4307

Scores

EPSS 0.0487

EPSS Percentile 89.7%

Details

Status published

Products (3)

wordpress/wordpress 2.0.2

wordpress/wordpress 2.0.3

wordpress/wordpress < 2.0.4

Published Nov 04, 2006

Tracked Since Feb 18, 2026