Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Zadyree

Pesquisador de3LRVS Team
#49184de 53,632
5CVSS total
Vulnerabilidades · 1
PT-2012-2196
5.0
2012-10-25
Mpdf · Mpdf · CVE-2011-5219
**Name of the Vulnerable Software and Affected Versions** mPDF versions 5.3 and earlier **Description** A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. (dot dot) in the `filename` parameter of the examples/show code.php file. **Recommendations** For mPDF versions 5.3 and earlier, consider restricting access to the examples/show code.php file until a patch is available. As a temporary workaround, avoid using the `filename` parameter with untrusted input to minimize the risk of exploitation.