This is a detailed vulnerability writeup describing a directory traversal vulnerability in Album Streamer v2.0 iOS. The vulnerability allows remote attackers to access arbitrary files on the device via the `id` parameter in the `photoDownload` module.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:Album Streamer v2.0 iOS
No auth needed
Prerequisites:Network access to the vulnerable iOS device