Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wp-db_backup_plugin_for_wordpress | Skippy.net | 1.6 (including) | 1.6 (including) |
| Wp-db_backup_plugin_for_wordpress | Skippy.net | 1.7 (including) | 1.7 (including) |
| Wordpress | Ubuntu | dapper | * |
| Wordpress | Ubuntu | upstream | * |