Description
Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP file with a .. (dot dot) in the FILENAME tag.
References
- 14187 third-party-advisory
- realarcade-rgp-file-deletion(19260) vdb-entry
- 1013128 vdb-entry
- 12494 vdb-entry
- 20050208 Integer overflow and arbitrary files deletion in RealArcade mailing-list