CVE-2016-20081

Name of the Vulnerable Software and Affected Versions HB Audio Gallery Lite version 1.0.0

Description A path traversal issue allows unauthenticated attackers to download arbitrary files. By manipulating the file path parameter in requests sent to the 'audio-download.php' endpoint using directory traversal sequences, attackers can access sensitive files, such as wp-config.php, located outside the intended gallery directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.