Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x when magic_quotes_gpc is disabled allows remote attackers to read arbitrary files via a .. (dot dot) in the optionsstyle_dir parameter to the default URI.