Home > Vulnerability Database > CVE-2011-4342

Mend Vulnerability Database

CVE-2011-4342

Good to know:

Date: October 8, 2012

PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.

Language: PHP

Severity Score

7.5

Related Resources (5)

Url: http://seclists.org/fulldisclosure/2011/Mar/328

Url: http://www.exploit-db.com/exploits/17056

Url: http://www.senseofsecurity.com.au/advisories/SOS-11-003.pdf

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-4342

Url: https://www.mend.io/vulnerability-database/CVE-2011-4342

Severity Score

7.5

Weakness Type (CWE)

Code Injection

CWE-94

Top Fix

Upgrade Version

Upgrade to version 1.7.2

Learn More

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2011-4342

Good to know:

Date: October 8, 2012

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?