Phpmybackuppro
10 CVEs across 1 Phpmybackuppro products. Browse Phpmybackuppro vulnerabilities, severities, and proof-of-concept exploits.
Phpmybackuppro products with known CVEs
Phpmybackuppro CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-5415 | High | 7.1 | 2024-05-28 | A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'c… |
CVE-2024-5414 | High | 7.1 | 2024-05-28 | A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/get_file.php… |
CVE-2024-5413 | High | 7.1 | 2024-05-28 | A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/scheduled.php… |
CVE-2015-3637 | High | 8.1 | 2017-12-28 | SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL commands via the username… |
CVE-2015-4181 | High | 7.5 | 2017-08-25 | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the v… |
CVE-2015-4180 | High | 7.5 | 2017-08-25 | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the v… |
CVE-2015-3640 | High | 7.5 | 2017-07-21 | phpMyBackupPro 2.5 and earlier does not properly escape the "." character in request parameters, which allows remote authenticated users with knowledge of a we… |
CVE-2015-3639 | High | 8.8 | 2017-07-21 | phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP code by storing a cra… |
CVE-2015-3638 | High | 8.8 | 2017-07-21 | phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injecting scripts via the p… |
CVE-2009-4050 | | | 2009-11-23 | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traversal sequences in th… |