QwikSec

Security Database

CVE

CWE

Training

CVE-2013-2742

Published: Apr 2, 2013

Modified: Sep 17, 2024

PUBLISHED

Description

importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote attackers to obtain access via subsequent requests to this script.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.com/files/120923

x_refsource_MISC

20130323 Backupbuddy wordpress plugin - sensitive data exposure in importbuddy.php

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.