Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.Referenceshttp://www.securityfocus.com/bid/2642http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html