PhpMyBackupPro records
10 published records for vendor phpmybackuppro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-20 Improper Input Validation1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2015-3638No exploit | phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injectinphpmybackuppro · phpmybackuppro · CWE-94 | High8.8 | — | 2.1% | Jul 21, 2017 |
36Monitor | CVE-2015-3639No exploit | phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP cophpmybackuppro · phpmybackuppro · CWE-20 | High8.8 | — | 2.0% | Jul 21, 2017 |
33Monitor | CVE-2015-4181Proof of concept | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a ..phpmybackuppro · phpmybackuppro · CWE-22 | High7.5 | — | 11.6% | Aug 25, 2017 |
32Monitor | CVE-2015-3637No exploit | SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL commanphpmybackuppro · phpmybackuppro · CWE-89 | High8.1 | — | 1.4% | Dec 27, 2017 |
31Monitor | CVE-2015-4180No exploit | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a ..phpmybackuppro · phpmybackuppro · CWE-22 | High7.5 | — | 2.9% | Aug 25, 2017 |
30Monitor | CVE-2015-3640No exploit | phpMyBackupPro 2.5 and earlier does not properly escape the "." character in request parameters, which allows remote authenticated users witphpmybackuppro · phpmybackuppro · CWE-94 | High7.5 | — | 1.2% | Jul 21, 2017 |
28Monitor | CVE-2024-5415No exploit | Cross-Site Scripting (XSS) vulnerability on PhpMyBackupProphpmybackuppro · phpmybackuppro · CWE-79 | High7.1 | — | 0.3% | May 28, 2024 |
28Monitor | CVE-2024-5414No exploit | Cross-Site Scripting (XSS) vulnerability on PhpMyBackupProphpmybackuppro · phpmybackuppro · CWE-79 | High7.1 | — | 0.3% | May 28, 2024 |
24Monitor | CVE-2024-5413No exploit | Cross-Site Scripting (XSS) vulnerability on PhpMyBackupProphpmybackuppro · phpmybackuppro · CWE-79 | Medium6.1 | — | 0.3% | May 28, 2024 |
22Monitor | CVE-2009-4050Proof of concept | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traverphpmybackuppro · phpmybackuppro · CWE-22 | Medium5.0 | — | 8.1% | Nov 23, 2009 |
- CVE-2015-363836Monitor
phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injectin
HighCVSS 8.8No exploitEPSS 2%phpmybackuppro · phpmybackupproJul 21, 2017
- CVE-2015-363936Monitor
phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP co
HighCVSS 8.8No exploitEPSS 2%phpmybackuppro · phpmybackupproJul 21, 2017
- CVE-2015-418133Monitor
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a ..
HighCVSS 7.5Proof of conceptEPSS 12%phpmybackuppro · phpmybackupproAug 25, 2017
- CVE-2015-363732Monitor
SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL comman
HighCVSS 8.1No exploitEPSS 1%phpmybackuppro · phpmybackupproDec 27, 2017
- CVE-2015-418031Monitor
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a ..
HighCVSS 7.5No exploitEPSS 3%phpmybackuppro · phpmybackupproAug 25, 2017
- CVE-2015-364030Monitor
phpMyBackupPro 2.5 and earlier does not properly escape the "." character in request parameters, which allows remote authenticated users wit
HighCVSS 7.5No exploitEPSS 1%phpmybackuppro · phpmybackupproJul 21, 2017
- CVE-2024-541528Monitor
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
HighCVSS 7.1No exploitEPSS 0%phpmybackuppro · phpmybackupproMay 28, 2024
- CVE-2024-541428Monitor
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
HighCVSS 7.1No exploitEPSS 0%phpmybackuppro · phpmybackupproMay 28, 2024
- CVE-2024-541324Monitor
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
MediumCVSS 6.1No exploitEPSS 0%phpmybackuppro · phpmybackupproMay 28, 2024
- CVE-2009-405022Monitor
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traver
MediumCVSS 5.0Proof of conceptEPSS 8%phpmybackuppro · phpmybackupproNov 23, 2009