ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Roads | Martin_hamilton | 2.3 (including) | 2.3 (including) |