MP3-jPlayer < 2.5 - Full Path Disclosure

Description

The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed.

120 $info = "<p>
121 Get: " . $mp3 . "<br />
122 Sent: " . $sent . "<br />
123 File: " . $file . "<br />
124 Open: " . $_SERVER['DOCUMENT_ROOT'] . $fp . "<br />
125 Root: " . $rooturl . "<br />
126 pID: " . $playerID . "<br />
127 Dbug: " . $dbug . "<br />
128 extension: " . $fileExtension . "</p>";
129 echo $info;