5
CVSSv2

CVE-2015-4180

Published: 25/08/2017 Updated: 30/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 up to and including 2.4 allows remote malicious users to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2009-4050.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmybackuppro phpmybackuppro 2.2

phpmybackuppro phpmybackuppro 2.4

phpmybackuppro phpmybackuppro 2.3

phpmybackuppro phpmybackuppro 2.1