Unscored CVE-2015-3639 EUVD-2015-3677GHSA-4q39-r3vf-m8jh

phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP c…

Published Jul 21, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP code by storing a crafted string in a user configuration file.

References

1032250 vdb-entry
[oss-security] 20150425 CVE requests / Advisory: phpMyBackupPro mailing-list
[oss-security] 20150504 Re: CVE requests / Advisory: phpMyBackupPro mailing-list