Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Backuppc Clear all filters
TI-2011-04358 CVE-2011-5081 · GHSA-hmq9-wmx8-f973

Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a Restore…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01957 Published 2012-02-18 No fix listed CWE-79
TI-2011-04237 CVE-2011-4923 · GHSA-3cx2-p7rj-x3rq

Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02032 Published 2012-02-18 No fix listed CWE-79
TI-2011-02971 CVE-2011-3361 · GHSA-x555-pm2v-q3p2

Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly…

Priority LOW 25

Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02416 Published 2012-02-18 No fix listed CWE-79
TI-2009-03211 CVE-2009-3369 · GHSA-438x-56gx-w64g

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user…

Priority MEDIUM 42

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write se…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.0294 Published 2009-09-24 No fix listed CWE-264