The famous WP-DB Backup plugin for WordPress is vulnerable to directory traversal attack. marc & shb from ssteam discovered this vulnerability about a week ago and the author of WP-DB Backup was not informed about it.
Proof of Concept:
You must have administrator rights in the wordpress blog to exploit this vulnerability.
http://path-to-wordpress/wp-admin/edit.php?page=wp-db-backup.php&backup=
../../../../../etc/passwd
The author of WP-DB Backup currently doesn’t have a fix for this exploit. Disabling the plugin will not fix the problem. You can either rename or delete the plugin for temporary fix. If your wordpress blog site has a few admins, then you definately need to fix this problem.
Good news is, Ryan Boren has a fix for the directory traversal vulnerability.
Related posts:
[...] These contemporary Celtic rings represent our unique creations based on timeless themes in 18k gold … These gold on sterling silver Celtic rings are classic and unique. Each gold Celtic ring is … Celtic Rings by Reflective Images: Gold over Silver Celtic Ring … Celtic Irish knotwork jewelry in 18K gold and silver including earrings, rings, pendants, brooches, cufflinks, and crosses. Celtic Jewelry: Celtic Wedding Rings, Celtic Crosses & Celtic Rings … for yourself & your loved ones from the stunning collection of silver, gold & white gold Celtic … All content and images Copyright © Celtic Rings Ltd 2002-2006. All rights reserved. A diverse range of Irish and Celtic Cross Jewelry in Gold and Silver … The beautiful ''Love, Loyalty, Friendship'' ring, is depicted in Gaelic as ''Gra Dilseacht Cairdeas' … Love Loyalty Friendship Ring (White Gold Trim) The beautiful ''Love, Loyalty, Friendship'' ring … Love Loyalty Friendship Ring (White Gold Trim)- Celtic Rings Ltd … Offers titanium wedding rings and bands with gold, platinum, and blue anodized inlays. Celtic Wedding Rings, Celtic Engagement Rings, Titanium Wedding Bands … celtic wedding rings – features our celtic wedding rings in gold, platinum and titanium. … A 1-of-a-kind collection Celtic Wedding rings, Celtic Bradied Rings, Celtic Titanium Rings … celtic wedding rings, celtic gold two wedding bands, custom designs Range of Celtic Rings and Irish rings in silver and Gold. Featuring celtic knot rings and claddagh … Celtic Rings and Irish Rings : Our range of Celtic Rings and Irish rings are made from the … Celtic Rings and Irish Rings in gold and silver Claddagh and Celtic Rings the most Beautiful Sentiment of Irish Culture. Made in Ireland by our … Stunning collection of Celtic and Claddagh Rings. Choose from Sterling Silver, Gold, Platinum and … Celtic Online Jewelry : Claddagh Celtic Ring Irish Dublin Ireland Celtic rings – Great choice of fine celtic rings in different celtic styles in white gold, yellow … Satisfying customers since 1997, we are your leading Internet source for high-end celtic rings. Celtic Rings in Gold or Platinum Celtic knotwork rings and wedding bands Celtic design by Stephen Walker … Gold Celtic Knotwork Rings. The shopping cart is a new feature on this site. If you wish to … Gold Celtic knotwork wedding rings Search results Live Search: celtic gold rings Gold, Platinum Celtic jewelry, celtic wedding rings – create your own design. … Customer Incentive Program $$ . Call 1-888-727-8266 to learn how you can save money on selected … Celtic Wedding Rings, Celtic engagement rings: gold, platinum celtic … Wedding Rings, Claddagh wedding bands and Diamond rings. Fine Celtic Wedding Jewelry, Unique gold … Select– Claddagh/Celtic Jewelry MFG Wedding Spinners Wedding, 2 Golds Wedding, 3 Golds Wedding … Wedding Rings and Celtic gold bands, unique designs,Free Shipping Wedding Rings, Claddagh wedding bands and Diamond rings. Fine Celtic Wedding Jewelry, Unique gold … Select– Claddagh/Celtic Jewelry MFG Wedding Spinners Wedding, 2 Golds Wedding, 3 Golds Wedding … Wedding Rings and Celtic gold bands, unique designs,Free Shipping Irish Charm Celtic Claddagh jewelry gold rings silver cross pendants necklaces handcrafted … Irish Charm Celtic Jewelry, gold rings, silver cross pendants. Celtic jewelry handcrafted … Irish Charm Celtic jewelry, gold rings silver cross pendants necklaces Choose from our range of Celtic Gold Rings. Handcrafted and hallmarked in Ireland. Celtic Online Jewelry : Claddagh Celtic Ring Irish Dublin Ireland Hand carved designs copyright Stephen Walker. Remounts of customer supplied stones are available. Please read our honesty statement regarding remounts. Gold Celtic Rings with Diamonds Men's Celtic Ring and knot designs, his and hers Wedding Rings, Claddagh Rings white gold silver … Men's Custom Celtic Rings is your online resource for the finest men's custom engraved Celtic … Men's Celtic Promise Wedding Rings Irish Claddagh Rings White Gold … Custom Promise Rings for men in white gold, yellow gold and sterling silver rings. Jewelry made to order in men’s rings claddagh rings, mens Celtic promise rings, matching promise ring's set, his … Promise Rings Men's Custom Jewelry White Gold Silver Rings Claddagh … Celtic rings and weddingbands in gold or platinum, etched with Celtic knotwork … Emerald Princess Heart Pear … celticrings.com Gold Celtic Wedding Rings. View wedding rings in 14k gold, or 18k gold. White Gold Celtic Wedding Rings. View wedding rings in 14k white gold, or 18k white gold. Wedding Rings – Irish Jewelry at My Celtic Jeweler link [...]