WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal Detection

WordPress SE HTML5 Album Audio Player 1.1.0 contains a directory traversal vulnerability in downloadaudio.php that allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress SE HTML5 Album Audio Player 1.""" impor...

CVE-2015-4414: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in downloadaudio.php in the SE HTML5 Album Audio Player se-html5-album-audio-player plugin 1.1.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

WordPress SE HTML5 Album Audio Player Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.SE HTML5 Album Audio Player is one of the HTML5 music player plugin. A directory traversal vulnerability exist...