Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
db backup project db backup vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2014-9119
Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and previous versions for Wordpress allows remote malicious users to read arbitrary files via a .. (dot dot) in the file parameter.
Db Backup Project Db Backup
1 EDB exploit
5
CVSSv2
CVE-2014-10076
The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote malicious users to read backup archives via a brute-force attack.
Wp-db-backup Project Wp-db-backup 2.2.4
4.3
CVSSv2
CVE-2008-0193
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and previous versions, and possibly 2.1.x up to and including 2.3.x, allows remote malicious users to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-a...
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.2.3
Wordpress Wordpress 2.1
Wordpress Wordpress 2.2 Revision5003
Wordpress Wordpress 2.2
Wordpress Wordpress 2.1.3
Wordpress Wordpress 2.2.0
Wordpress Wordpress 2.1.2
Wordpress Wordpress 2.2.2
Wordpress Wordpress 2.2.1
Wordpress Wordpress 2.1.3 Rc1
Wordpress Wordpress
Wordpress Wordpress 2.2 Revision5002
Wordpress Wordpress 2.3
1 EDB exploit
4.3
CVSSv2
CVE-2022-0833
The Church Admin WordPress plugin prior to 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated malicious users to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a pub...
Church Admin Project Church Admin
7.5
CVSSv2
CVE-2008-0194
Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and previous versions allows remote malicious users to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. (dot dot) in the backup parameter in a wp-db-backup.php action to w...
Wordpress Wordpress
7.5
CVSSv2
CVE-2007-2821
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress prior to 2.2 allows remote malicious users to execute arbitrary SQL commands via the cookie parameter.
Wordpress Wordpress
1 EDB exploit
1 Github repository
6
CVSSv2
CVE-2007-3238
Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI) to wp-admin/themes.php, a different vulnerability than CVE-2007-1622. ...
Wordpress Wordpress 2.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started