# vul_description: Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter.

%Relationships 
CVE_2015_5471: types sources exploits swim__team__project;

types: application;
sources: nvd;

exploits: [direct] [indirect];
swim__team__project: swim__team__project_swim__team;

swim__team__project_swim__team: swim__team__project_swim__team_version swim__team__project_swim__team_target__sw;

swim__team__project_swim__team_version: swim__team__project_swim__team_version_1__44__10777;
swim__team__project_swim__team_target__sw: swim__team__project_swim__team_target__sw_wordpress;
direct: exploit_37601;


%Constraints 
swim__team__project_swim__team REQUIRES application;
