CVE-2011-5219 Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
MediumCVSS 5.0
EPSS 9.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mpdf1 mpdf | <= 5.3 | No fix listed |
| mpdf1 mpdf | = 5.2 | No fix listed |
References
- 77939 vdb-entry
- 47262 third-party-advisory vendor-advisory
- 18248 exploit
- mpdf-showcode-dir-traversal(71862) vdb-entry