CVE-2012-0898 – myEASYbackup < 1.0.9 - Directory Traversal

https://notcve.org/view.php?id=CVE-2012-0898

Directory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dwn_file parameter. Vulnerabilidad de salto de directorio en meb_download.php en el complemento myEASYbackup v1.0.8.1 para WordPress, permite a atacantes remotos leer archivos de su elección a través de .. (punto punto) en el parámetro dwn_file. • http://packetstormsecurity.org/files/view/108711/wpmyeasybackup-traversal.txt http://secunia.com/advisories/47594 https://exchange.xforce.ibmcloud.com/vulnerabilities/72404 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •