Home > Vulnerability Database > CVE-2011-4342

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2011-4342

Good to know:

Date: October 8, 2012

PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.

Language: PHP

Severity Score

7.3

Related Resources (11)

Url: http://seclists.org/fulldisclosure/2011/Mar/328

Url: http://www.exploit-db.com/exploits/17056

Url: http://www.senseofsecurity.com.au/advisories/SOS-11-003.pdf

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-4342

Url: http://www.openwall.com/lists/oss-security/2011/11/22/7

Url: http://wordpress.org/support/topic/plugin-backwpup-remote-and-local-codeexecution-vulnerability-sos-11-003

Url: http://www.openwall.com/lists/oss-security/2011/11/22/10

Url: http://packetstormsecurity.org/files/view/99799/SOS-11-003.txt

Url: http://secunia.com/advisories/43565

Url: http://www.osvdb.org/71481

Url: https://www.mend.io/vulnerability-database/CVE-2011-4342

Severity Score

7.3

Weakness Type (CWE)

Code Injection

CWE-94

Top Fix

Upgrade Version

Upgrade to version 1.7.2

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us