myEASYbackup < 1.0.9 - Directory Traversal
mediumDirectory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dwn_file parameter.
- CVSS:
- 5.3
- Affected:
- up to 1.0.9
- Fixed in:
- 1.0.9
- Disclosed:
- Jan 16, 2012