Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.
| Software | From | Fixed in |
|---|---|---|
| phpmyexplorer / phpmyexplorer_classic | 1.0 | 1.0.x |
| phpmyexplorer / phpmyexplorer_classic | 1.1.0 | 1.1.0.x |
| phpmyexplorer / phpmyexplorer_classic | 1.1.1 | 1.1.1.x |
| phpmyexplorer / phpmyexplorer_classic | 1.1.3 | 1.1.3.x |
| phpmyexplorer / phpmyexplorer_classic | 1.1.4 | 1.1.4.x |
| phpmyexplorer / phpmyexplorer_classic | 1.1.5 | 1.1.5.x |
| phpmyexplorer / phpmyexplorer_classic | 1.2 | 1.2.x |
| phpmyexplorer / phpmyexplorer_multiuser | 1.0 | 1.0.x |