PublicDate: 2006-11-04 01:07:00 UTC Candidate: CVE-2006-5705 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5705 Description: Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_wordpress: ignored (reached end-of-life) edgy_wordpress: needed (reached end-of-life) feisty_wordpress: not-affected gutsy_wordpress: not-affected hardy_wordpress: not-affected intrepid_wordpress: not-affected jaunty_wordpress: not-affected karmic_wordpress: not-affected devel_wordpress: not-affected upstream_wordpress: released (2.0.5)