Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player) plugin 1.1.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-06-17T18:00:00

Updated: 2024-08-06T06:11:12.952Z

Reserved: 2015-06-07T00:00:00

Link: CVE-2015-4414

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-06-17T18:59:08.407

Modified: 2024-11-21T02:31:01.397

Link: CVE-2015-4414

cve-icon Redhat

No data.