WordPress Simple Backup Plugin 'tools.php' Arbitrary File Download Vulnerability

Bugtraq ID:	74758
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 19 2015 12:00AM
Updated:	May 19 2015 12:00AM
Credit:	Mahdi.Hidden
Vulnerable:	WordPress Simple Backup 2.7.10
Not Vulnerable:

WordPress Simple Backup Plugin 'tools.php' Arbitrary File Download Vulnerability

The Simple Backup plugin for WordPress is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to download arbitrary files within the context of the web server process. Information obtained may aid in further attacks.

WordPress Simple Backup Plugin 'tools.php' Arbitrary File Download Vulnerability

Attackers can use a browser to exploit this issue.

WordPress Simple Backup Plugin 'tools.php' Arbitrary File Download Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WordPress Simple Backup Plugin 'tools.php' Arbitrary File Download Vulnerability

References:

• Simple Backup Plugin Homepage (WordPress)