Unrated severityNVD Advisory· Published Aug 17, 2006· Updated Jun 16, 2026
CVE-2006-4208
CVE-2006-4208
Description
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:skippy.net:wp-db_backup_plugin_for_wordpress:1.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:skippy.net:wp-db_backup_plugin_for_wordpress:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:skippy.net:wp-db_backup_plugin_for_wordpress:1.7:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- www.securityfocus.com/bid/19504nvdExploit
- secunia.com/advisories/21486nvdVendor Advisory
- securityreason.com/securityalert/1401nvd
- trac.wordpress.org/changeset/4095nvd
- www.securityfocus.com/archive/1/443181/100/0/threadednvd
- www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/nvd
- www.vupen.com/english/advisories/2006/3280nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28375nvd
News mentions
0No linked articles in our index yet.