CVE-2001-1168

In PhpMyExplorer, Vulnerability CVE-2001-1168 is a directory traversal in index.php (chemin param) exploitable through encoded ../ sequences to read arbitrary files. Affected software: PhpMyExplorer prior to 1.2.1; vulnerable file/parameter: index.php and chemin. Impact: potential remote file dis...

PhpMyExplorer index.php chemin Parameter Encoded Traversal Arbitrary File Access

phpMyExplorer is vulnerable to a directory traversal attack that allows anyone to make the remote web server read and display arbitrary directories. For example: GET /index.php?chemin=..%2F..%2F..%2F..%2F%2Fetc will return the contents of the remote /etc directory. %NASLMINLEVEL 70300 C Tenable...