CVE-2017-2550

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily guessable filename.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
kubik-rubikEasy Joomla Backup>= unspecified, < 3.2.4

References

Timeline

Published
Sep 8, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-25517.5Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download.CVE-2017-25756.5A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of funCVE-2017-25765.3In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.CVE-2017-25786.1In Moodle 3.x, there is XSS in the assignment submission page.CVE-2017-25797.8An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value checCVE-2017-25807.8An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or poCVE-2017-25817.8An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or poCVE-2017-25826.5It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining aCVE-2017-25838.4The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL seCVE-2017-25847.1arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a deCVE-2017-25855.9Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constantCVE-2017-25865.5A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to cra
CVE-2017-2550: High severity, CVSS 7.5 | Vulnix