CVE-2009-0731: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...