CVE-2006-4208

CVE-2006-4208 describes a directory traversal vulnerability in the Skippy WP-DB-Backup plugin for WordPress versions 1.7 and earlier. This flaw allows authenticated administrative users to read arbitrary files on the server by manipulating the 'backup' parameter in edit.php with dot-dot-slash sequences. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector and potential for unauthorized information disclosure. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion surrounding this older vulnerability.