Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| jason_rahaim | mp3mystic | 1.0 |
| jason_rahaim | mp3mystic | 1.0.4 |
| jason_rahaim | mp3mystic | 1.0.3 |
| jason_rahaim | mp3mystic | 1.0.1 |