ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Roads |
Martin_hamilton |
2.3 (including) |
2.3 (including) |
References