BackWPup Plugin for WordPress 'wp_export_generate.php' Local and Remote File Include Vulnerabilities

Bugtraq ID:	50176
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Oct 17 2011 12:00AM
Updated:	Oct 17 2011 12:00AM
Credit:	Phil Taylor
Vulnerable:	WordPress BackWPup 2.1.4
Not Vulnerable:	WordPress BackWPup 2.1.5

BackWPup Plugin for WordPress 'wp_export_generate.php' Local and Remote File Include Vulnerabilities

The BackWPup plugin for WordPress is prone to a local file-include vulnerability and a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to execute arbitrary local and remote scripts in the context of the webserver process or obtain potentially sensitive information. This may result in a compromise of the application and the underlying system; other attacks are also possible.

BackWPup 2.1.4 is vulnerable; other versions may also be affected.

BackWPup Plugin for WordPress 'wp_export_generate.php' Local and Remote File Include Vulnerabilities

An attacker can exploit these issues via a browser.

BackWPup Plugin for WordPress 'wp_export_generate.php' Local and Remote File Include Vulnerabilities

Solution:
Updates are available. Please see the reference for more details.

BackWPup Plugin for WordPress 'wp_export_generate.php' Local and Remote File Include Vulnerabilities

References:

• Backwpup Homepage (WordPress)
  
• Sense of Security - Security Advisory - SOS-11-012 (Sense of Security)
  
• WordPress Plugin BackWPUp 2.1.4 - Security Advisory - SOS-11-012 (Sense of Security)