What is CVE-2014-9119?

CVE-2014-9119 is a vulnerability in Db_backup_project Db_backup, classified under Path Traversal. Published 2014-12-31.

Is CVE-2014-9119 known to be exploited?

5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Db_backup_project Db_backup

CVE-2014-9119

Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.511 (97.9th percentile) — read the EPSS interpretation.

Affected products

Db_backup_project Db_backup
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

References

dbbackup-wordpress-cve20149119-dir-traversal(99368) (vdb-entry, x_refsource_XF)
[oss-security] 20141216 CVE-2014-9119: DB Backup plugin for WordPress download.php file Parameter Remote Path Traversal File Access (mailing-list, x_refsource_MLIST, Exploit)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-9119?: CVE-2014-9119 is a vulnerability in Db_backup_project Db_backup, classified under Path Traversal. Published 2014-12-31.
Is CVE-2014-9119 known to be exploited?: 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.