PhpMyBackupPro Unspecified Potential Input Validation Vulnerabilities
BID:11103
Info
PhpMyBackupPro Unspecified Potential Input Validation Vulnerabilities
| Bugtraq ID: | 11103 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 29 2004 12:00AM |
| Updated: | Aug 29 2004 12:00AM |
| Credit: | The vendor disclosed these issues. |
| Vulnerable: |
phpMyBackupPro phpMyBackupPro 0.6.2 |
| Not Vulnerable: |
phpMyBackupPro phpMyBackupPro 1.0 |
Discussion
PhpMyBackupPro Unspecified Potential Input Validation Vulnerabilities
phpMyBackupPro is reported prone to multiple unspecified input validation vulnerabilities. These issues were identified by the vendor. The cause and impact of these issues is currently unknown, however, they are reported to occur due to insufficient validation of some configuration entries and validation of mySQL username and password values. It is conjectured that these issues may allow an attacker to gain unauthorized access to the application. Disclosure of database backups is a possibility as well.
phpMyBackupPro versions 0.6.2 and prior are affected by these issues.
phpMyBackupPro is reported prone to multiple unspecified input validation vulnerabilities. These issues were identified by the vendor. The cause and impact of these issues is currently unknown, however, they are reported to occur due to insufficient validation of some configuration entries and validation of mySQL username and password values. It is conjectured that these issues may allow an attacker to gain unauthorized access to the application. Disclosure of database backups is a possibility as well.
phpMyBackupPro versions 0.6.2 and prior are affected by these issues.
Exploit / POC
PhpMyBackupPro Unspecified Potential Input Validation Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
PhpMyBackupPro Unspecified Potential Input Validation Vulnerabilities
Solution:
The vendor has released phpMyBackupPro 1.0 to address these issues.
phpMyBackupPro phpMyBackupPro 0.6.2
Solution:
The vendor has released phpMyBackupPro 1.0 to address these issues.
phpMyBackupPro phpMyBackupPro 0.6.2
-
phpMyBackupPro phpMyBackupPro.v.1.0.zip
http://prdownloads.sourceforge.net/phpmybackup/phpMyBackupPro.v.1.0.zi p?download
References
PhpMyBackupPro Unspecified Potential Input Validation Vulnerabilities
References:
References:
- phpMyBackupPro Homepage (phpMyBackupPro)