Directory traversal vulnerability in window.php possibly used by home.php in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter which triggers a directory listing through the opendir function.