Backup Manager
by Sukria
Source repositories
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-47826 | Hig | 0.51 | 7.8 | 0.00 | Jan 16, 2026 | Acer Backup Manager 3.0.0.99 contains an unquoted service path vulnerability in the NTI IScheduleSvc service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\NTI\Acer Backup Manager\ to inject… | ||
| CVE-2023-35775 | 0.00 | — | 0.00 | Jun 19, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Backup Solutions WP Backup Manager plugin <= 1.13.1 versions. | |||
| CVE-2007-4656 | 0.00 | — | 0.00 | Sep 4, 2007 | backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different… | |||
| CVE-2007-2766 | 0.00 | — | 0.00 | May 18, 2007 | lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh. | |||
| CVE-2005-1855 | 0.00 | — | 0.00 | Aug 30, 2005 | Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information. | |||
| CVE-2005-1856 | 0.00 | — | 0.00 | Aug 30, 2005 | The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack. | |||
| CVE-2005-2211 | 0.00 | — | 0.00 | Jul 11, 2005 | Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR. | |||
| CVE-2005-2212 | 0.00 | — | 0.01 | Jul 11, 2005 | Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository. |
- risk 0.51cvss 7.8epss 0.00
Acer Backup Manager 3.0.0.99 contains an unquoted service path vulnerability in the NTI IScheduleSvc service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\NTI\Acer Backup Manager\ to inject…
- CVE-2023-35775Jun 19, 2023risk 0.00cvss —epss 0.00
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Backup Solutions WP Backup Manager plugin <= 1.13.1 versions.
- CVE-2007-4656Sep 4, 2007risk 0.00cvss —epss 0.00
backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different…
- CVE-2007-2766May 18, 2007risk 0.00cvss —epss 0.00
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- CVE-2005-1855Aug 30, 2005risk 0.00cvss —epss 0.00
Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.
- CVE-2005-1856Aug 30, 2005risk 0.00cvss —epss 0.00
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.
- CVE-2005-2211Jul 11, 2005risk 0.00cvss —epss 0.00
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR.
- CVE-2005-2212Jul 11, 2005risk 0.00cvss —epss 0.01
Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository.