logo
DATABASE RESOURCES PRICING ABOUT US

DZS Zoomsounds < 6.50 - Unauthenticated Arbitrary File Download

Description

The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsap_download action using directory traversal in the link parameter


Affected Software


CPE Name Name Version
dzs-zoomsounds 6.50

Related