PT-2014-3299

Name of the Vulnerable Software and Affected Versions Advanced Dewplayer plugin version 1.2 for WordPress Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the dew file parameter in the download-file.php file. Recommendations For Advanced Dewplayer plugin...