Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) attack on the next parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Interactive_story | Valerie_mates | 1.3 (including) | 1.3 (including) |