Description
The web application uses Total.js framework. Total.js before 3.2.4 has a directroy traversal vulnerability. An attacker can craft a request that accesses potentially sensitive information on the server, that may lead to takeover of the server.
Remediation
Upgrade to the latest version of Total.js
References
Related Vulnerabilities
WordPress Plugin BackWPup Multiple Local File Include Vulnerabilities (1.5.2)
WordPress Plugin Shariff Wrapper Local File Inclusion (4.6.13)
WordPress Plugin BP Group Documents Multiple Vulnerabilities (1.2.1)
WordPress Plugin Thinkun Remind 'dirPath' Parameter Information Disclosure (1.1.3)
WordPress Plugin Smush Image Compression and Optimization Directory Traversal (2.7.5)