Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a ‘..’ (dot dot) in the URL.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mp3mystic | Jason_rahaim | 1.0 | 1.0 |
Mp3mystic | Jason_rahaim | 1.0.1 | 1.0.1 |
Mp3mystic | Jason_rahaim | 1.0.3 | 1.0.3 |
Mp3mystic | Jason_rahaim | 1.0.4 | 1.0.4 |