WordPress.org

Ready to get started?Download WordPress

Forums

BackWPup Free - WordPress Backup Plugin
Full Path Disclosure in various files (2 posts)

  1. Ov3rfly
    Member
    Posted 1 year ago #

    Various files disclose the full server path to htdocs/www folder via error messages.

    See also https://www.owasp.org/index.php/Full_Path_Disclosure

    Examples:

    hxxp://example.com/wp-content/plugins/backwpup/job/wp_export_generate.php
    Warning: file_get_contents(/var/full/path/www/wp-content/plugins/backwpup/tmp/.running) [function.file-get-contents]: failed to open stream: No such file or directory in /var/full/path/www/wp-content/plugins/backwpup/job/wp_export_generate.php on line 12

    hxxp://localhost.example.com/wp-content/plugins/backwpup/job/show_working.php
    Notice: Undefined index: logfile in /var/full/path/www/wp-content/wp-content/plugins/backwpup/job/show_working.php on line 53

    hxxp://example.com/wp-content/plugins/backwpup/pages/func_backwpuplogs.php
    Fatal error: Call to undefined function trailingslashit() in /var/full/path/www/wp-content/plugins/backwpup/pages/func_backwpuplogs.php on line 2

    hxxp://example.com/wp-content/plugins/backwpup/pages/func_backwpupbackups.php
    Fatal error: Call to undefined function trailingslashit() in /var/full/path/www/wp-content/plugins/backwpup/pages/func_backwpupbackups.php on line 2

    hxxp://example.com/wp-content/plugins/backwpup/pages/func_backwpup.php
    Fatal error: Call to undefined function trailingslashit() in /var/full/path/www/wp-content/plugins/backwpup/pages/func_backwpup.php on line 2

    hxxp://example.com/wp-content/plugins/backwpup/backwpup.php
    Fatal error: Call to undefined function plugin_basename() in /var/full/path/www/wp-content/plugins/backwpup/backwpup.php on line 32

    http://wordpress.org/extend/plugins/backwpup/

  2. Daniel Hüsken
    Member
    Plugin Author

    Posted 1 year ago #

    Most fiexed in next update

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic

Tags

No tags yet.