Description
Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
References
- 2642 vdb-entry
- 20010423 (SRPRE00001) phpMyAdmin 2.1.0 and phpPgAdmin 2.2.1 mailing-list