Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Zadyree

Researcher from3LRVS Team
#49173of 53,630
5Total CVSS
Vulnerabilities · 1
PT-2012-2196
5.0
2012-10-25
Mpdf · Mpdf · CVE-2011-5219
**Name of the Vulnerable Software and Affected Versions** mPDF versions 5.3 and earlier **Description** A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. (dot dot) in the `filename` parameter of the examples/show code.php file. **Recommendations** For mPDF versions 5.3 and earlier, consider restricting access to the examples/show code.php file until a patch is available. As a temporary workaround, avoid using the `filename` parameter with untrusted input to minimize the risk of exploitation.