cpe:/a:freearcadescript:free_arcade_script:1.0 CVE-2009-0731 2009-02-24T18:30:03.877-05:00 2017-09-28T21:33:59.247-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2009-02-25T10:19:00.000-05:00 BID 33869 SECUNIA 34023 EXPLOIT-DB 8094 Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter.