Published: 25/08/2017 Updated: 30/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 up to and including 2.5 allows remote malicious users to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2015-4180.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpmybackuppro phpmybackuppro 2.2
phpmybackuppro phpmybackuppro 2.3
phpmybackuppro phpmybackuppro 2.4
phpmybackuppro phpmybackuppro 2.1
phpmybackuppro phpmybackuppro 2.5

################################################################################ Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected phpMyBackupPro v 21 and possibly earlier versions site wwwphpmybackuppronet Author Amol Naik (amolnaik4[at]gmailcom) Date 16/11/2009 #### ...

CWE-22 http://www.openwall.com/lists/oss-security/2015/06/04/10 https://nvd.nist.gov https://www.exploit-db.com/exploits/10169/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-4181

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect