CVE-2007-5800

2007-11-0300:46:00

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.102

Percentile

95.1%

JSON

Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/.

Affected configurations

Nvd

Node

tom_willmotbackupwordpress_pluginRange≤0.4.2b

AND

wordpresswordpress

VendorProductVersionCPE
tom_willmotbackupwordpress_plugin*cpe:2.3:a:tom_willmot:backupwordpress_plugin:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tom_willmot	backupwordpress_plugin	*	cpe:2.3:a:tom_willmot:backupwordpress_plugin::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::