Read the docs

Backuppc

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Backuppc records in CISA KEV

No Backuppc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Backuppc 4 records MEDIUM

Records

4 records

TI-2009-03211 CVE-2009-3369 · GHSA-438x-56gx-w64g

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user…

Priority MEDIUM 42

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write se…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.0294 Published 2009-09-24 No fix listed CWE-264
TI-2011-02971 CVE-2011-3361 · GHSA-x555-pm2v-q3p2

Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly…

Priority LOW 25

Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02416 Published 2012-02-18 No fix listed CWE-79
TI-2011-04358 CVE-2011-5081 · GHSA-hmq9-wmx8-f973

Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a Restore…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01957 Published 2012-02-18 No fix listed CWE-79
TI-2011-04237 CVE-2011-4923 · GHSA-3cx2-p7rj-x3rq

Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02032 Published 2012-02-18 No fix listed CWE-79
Open these records in search →