Unscored CVE-2013-2744 EUVD-2013-2683GHSA-p56h-5fx4-p722

importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 php…

Published Apr 2, 2013 · Updated Sep 16, 2024 · Assigned by mitre

Description

importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function.

References

http://packetstormsecurity.com/files/120923
20130323 Backupbuddy wordpress plugin - sensitive data exposure in importbuddy.php mailing-list