CVE-2001-1168

Published: Aug 29, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.

Affected (8)

Products: Phpmyexplorer: Phpmyexplorer Classic, Phpmyexplorer Multiuser

Phpmyexplorer

2 products

Phpmyexplorer Classic

Phpmyexplorer Multiuser

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Phpmyexplorer Phpmyexplorer Classic	Version 1.0
Phpmyexplorer Phpmyexplorer Classic	Version 1.1.0
Phpmyexplorer Phpmyexplorer Classic	Version 1.1.1
Phpmyexplorer Phpmyexplorer Classic	Version 1.1.3
Phpmyexplorer Phpmyexplorer Classic	Version 1.1.4
Phpmyexplorer Phpmyexplorer Classic	Version 1.1.5
Phpmyexplorer Phpmyexplorer Classic	Version 1.2
Phpmyexplorer Phpmyexplorer Multiuser	Version 1.0

References (4)

http://archives.neohapsis.com/archives/bugtraq/2001-08/0408.html

Source: cve@mitre.org

ExploitVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2001-08/0418.html

Source: cve@mitre.org

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2001-08/0408.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2001-08/0418.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.