Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via …/…// sequences in the file parameter, which are reduced to ../ when PHPSource Printer uses a regular expression to remove ../ sequences.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Quick_and_dirty_phpsource_printer | Kaf_oseo | 1.1 (including) | 1.1 (including) |