# Title   : Wordpress-Tierra Audio Full Path Disclosure/Directory Listing Vulnerabilities.
# Author  : Dark-Puzzle (Souhail Hammou)   
# Date    : 14th September 2012
# Risk     : Low
# Tested On : Windows XP SP3 - Fr & Backtrack 5 R3
# Greetings : Inj3ct0rs - Offensive Security - Security Focus - Packetstorm Security .
# Contact Me: http://www.facebook.com/dark-puzzle OR dark-puzzle@live.fr

############################################################

Tierra Audio Plugins Is prone to two vulnerabilities . 
To Disclosure the full path you will have to open the file "audio-playlist-manager.php" without an 'id' parameter .
The origin of this problem is some scripting mistakes .

Example :

http://www.samabima.info/wp-content/plugins/tierra-audio-with-autoresume/audio-playlist-manager.php

#############################################################

In Addition you can navigate the tierra plugin directory easily :

Example :

http://gotconnex.tv/wp-content/plugins/tierra-audio-with-autoresume/

##################################
Solution : 
.htaccess must be certainly edited to avoid the directory listing problem .
#################################
      

#Datasec Team .