CVE-2005-2256

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.

Date published : 2005-07-13

http://www.securityfocus.com/bid/14142

http://sourceforge.net/project/shownotes.php?release_id=342261