CVE-2014-5181

The CVE-2014-5181 issue affects the Last.fm Rotation WordPress plugin (version 1.0) via lastfm-proxy.php. A directory traversal flaw allows an attacker to read arbitrary files by supplying a .. in the snode parameter, enabling potential information disclosure. The Nuclei template and related reco...

CVE-2014-5181: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter...