CVE-2007-5800

Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary…

published November 3, 2007

CVSS

—

EPSS

37%

Percentile

98.5

In the wild

Unconfirmed

What it is

Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.36543 · 98.5th percentile
Published: 2007-11-03T00:00Z

EPSS history

Timeline

03 NOV 00:00Z
Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary…
cvelistv5