CVE-2014-5181

The CVE-2014-5181 issue affects the Last.fm Rotation WordPress plugin (version 1.0) via lastfm-proxy.php. A directory traversal flaw allows an attacker to read arbitrary files by supplying a .. in the snode parameter, enabling potential information disclosure. The Nuclei template and related reco...