| Package | Affected versions | Patched versions |
|---|---|---|
| winamp web interface | = 7.5.11= 7.5.9≤ 7.5.13 |
The CControl::Download function (/dl URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." (dot) in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free