Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via \.../...//\ sequences in the file parameter which are reduced to \../\ when PHPSource Printer uses a regular expression to remove \../\ sequences.