Software: WP-DB Backup Plugin for Wordpress
WP-DB Backup is vulnerable to directory traversal attack.
You must have administrator rights in the wordpress blog to exploit
marc & shb from ssteam are credited with discoverying this vulnerability.
Coolest IT security blog: http://ssteam.ath.cx