diff --git a/export.php b/export.php
index 7036af9277..10567d1d1a 100644
--- a/export.php
+++ b/export.php
@@ -272,6 +272,8 @@ if ($asfile) {
                 'Export/file_template_table', $filename_template);
         }
     }
+    // remove dots in template to avoid a remote code execution vulnerability
+    $filename_template = str_replace('.', '', $filename_template);
     $filename = PMA_expandUserString($filename_template);
     $filename = PMA_sanitize_filename($filename);