My PHP Indexer "d" and "f" Parameters File Download Vulnerability
Description
A vulnerability has been identified in My PHP Indexer, which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system. This issue is caused by an input validation error in the "index.php" script that does not validate the "d" and "f" parameters before being passed as an argument to a "fread()" call, which could be exploited to download arbitrary files via directory traversal attacks.
Vulnerable Products
Vulnerable Software: My PHP Indexer version 1.0 and prior
