ID de Prueba:	1.3.6.1.4.1.25623.1.0.805120
Categoría:	Web application abuses
Título:	WordPress Html5 Mp3 Player 'playlist.php' Path Disclosure Vulnerability
Resumen:	The WordPress plugin 'Html5 Mp3 Player with Playlist' is prone to path disclosure vulnerability.
Descripción:	Summary: The WordPress plugin 'Html5 Mp3 Player with Playlist' is prone to path disclosure vulnerability. Vulnerability Insight: Flaw is triggered when a remote attacker sends a direct request for the /html5plus/playlist.php script. Vulnerability Impact: Successful exploitation will allow remote attackers to discloses the software's installation path resulting in a loss of confidentiality. Affected Software/OS: WordPress HTML5 MP3 Player with Playlist Free plugin before 2.7 Solution: Upgrade to version 2.7 or higher. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9177 http://h4x0resec.blogspot.com/2014/11/wordpress-html5-mp3-player-with.html http://packetstormsecurity.com/files/129286/WordPress-Html5-Mp3-Player-Full-Path-Disclosure.html XForce ISS Database: html5mp3player-wp-playlist-path-disclosure(98988) https://exchange.xforce.ibmcloud.com/vulnerabilities/98988
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.