Last.fm Rotation 1.0 - Path Traversal Detection

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in...

PT-2014-6320

Name of the Vulnerable Software and Affected Versions Last.fm Rotation lastfm-rotation plugin version 1.0 for WordPress Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter. This is a directory traversal vulnerability in the lastfm-proxy.ph...

CVE-2014-5181: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter...