Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Zadyree

Pesquisador de3LRVS Team
#51778de 56,333
5CVSS total
Vulnerabilidades · 1
PT-2012-2196
5.0
2012-10-25
Mpdf · Mpdf · CVE-2011-5219
**Name of the Vulnerable Software and Affected Versions** mPDF versions 5.3 and earlier **Description** A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. (dot dot) in the `filename` parameter of the examples/show code.php file. **Recommendations** For mPDF versions 5.3 and earlier, consider restricting access to the examples/show code.php file until a patch is available. As a temporary workaround, avoid using the `filename` parameter with untrusted input to minimize the risk of exploitation.