Описание
The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) $backup['filepath'] (aka "Path to Backup:" field) or (2) $backup['mysqldumppath'] variable.
Ссылки
- Exploit
- Exploit
- Exploit
- Exploit
- Exploit
- Patch
- Exploit
- Exploit
- Exploit
- Exploit
- Exploit
- Patch
Уязвимые конфигурации
Конфигурация 1Версия до 2.71 (включая)
cpe:2.3:a:wp-dbmanager_project:wp-dbmanager:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 89%
0.04305
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-78
Связанные уязвимости
github
больше 3 лет назад
The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) $backup['filepath'] (aka "Path to Backup:" field) or (2) $backup['mysqldumppath'] variable.
EPSS
Процентиль: 89%
0.04305
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-78