Security Advisory
CVE-2005-2256
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.