CVE-2006-5705

CVE-2006-5705 describes multiple directory traversal vulnerabilities within the wp-db-backup.php plugin in WordPress versions prior to 2.0.5. Authenticated attackers could exploit this flaw by manipulating the "backup" or "fragment" parameters in a GET request, allowing them to read or overwrite arbitrary files on the server. With a CVSS score of 6.0, this vulnerability is of medium severity, requiring authentication and moderate attack complexity, but potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this older vulnerability.