CVE-2023-7002

Description

References

• plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php · Exploit
• plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php · Exploit
• plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php · Exploit
• plugins.trac.wordpress.org/changeset/3012745/backup-backup · Patch
• linuxquestions.org/questions/linux-security-4/php-function-exec-enabled-how-big-issue-4175508082 · Patch
• wordfence.com/threat-intel/vulnerabilities/id/cc49db10-988d-42bd-a9cf-9a86f4c79568 · Third Party Advisory

Autres vulnérabilités de backup migration

• CVE-2023-6266ÉLEVÉE 7.5The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the B…
• CVE-2023-6271ÉLEVÉE 7.5The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which …
• CVE-2023-6972CRITIQUE 9.8The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backu…
• CVE-2023-6971CRITIQUE 9.8The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP heade…
• CVE-2023-6553CRITIQUE 9.8The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includ…