phpMyBackupPro 2.3
Approved changes feed: RSS · Atom
cpe:2.3:a:phpmybackuppro:phpmybackuppro:2.3:*:*:*:*:*:*:*part: a version: 2.3 update: *
| Vendor | Phpmybackuppro (403238ed-bb9c-59a2-aaf4-ee032c90f929) |
|---|---|
| Product | Phpmybackuppro (8ac681db-6e91-5222-8450-cb8c2c772b49) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/javanile/mybackup |
purl2cpe | 2026-06-01 10:12:37.611816 |
pkg:github/javanile-backup/mybackup |
purl2cpe | 2026-06-01 10:12:37.611817 |
pkg:sourceforge/phpmybackup |
purl2cpe | 2026-06-01 10:12:37.611818 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5415 |
vulnerable | 2026-06-08 06:56:15.957923 |
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
HIGH (7.1)
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'comments' and 'db' parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.
Published: 2024-05-28T12:22:19.808Z
Updated: 2024-08-01T21:11:12.765Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5414 |
vulnerable | 2026-06-08 06:56:15.957333 |
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
HIGH (7.1)
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/get_file.php, 'view' parameter. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.
Published: 2024-05-28T12:22:02.463Z
Updated: 2024-08-01T21:11:12.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5413 |
vulnerable | 2026-06-08 06:56:15.956851 |
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
HIGH (7.1)
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/scheduled.php, all parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.
Published: 2024-05-28T12:21:40.642Z
Updated: 2024-08-01T21:11:12.746Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4181 |
vulnerable | 2026-06-08 05:06:39.336014 |
Details available
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2015-4180.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T06:04:03.203Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4180 |
vulnerable | 2026-06-08 05:06:39.334905 |
Details available
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2009-4050.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T06:04:02.953Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.