medium5.0
CVE-2014-5181
Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attackers to read arbitr…
Impact
Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the snode parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Last.Fm Rotation Plugin Project | Lastfm-Rotation Plugin | Version 1.0 |