Last.fm Rotation 1.0 - Path Traversal Detection

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in...

CVE-2014-5181

The CVE-2014-5181 issue affects the Last.fm Rotation WordPress plugin (version 1.0) via lastfm-proxy.php. A directory traversal flaw allows an attacker to read arbitrary files by supplying a .. in the snode parameter, enabling potential information disclosure. The Nuclei template and related reco...

PT-2014-6320

Name of the Vulnerable Software and Affected Versions Last.fm Rotation lastfm-rotation plugin version 1.0 for WordPress Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter. This is a directory traversal vulnerability in the lastfm-proxy.ph...

CVE-2014-5181: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter...