77939vdb entry
http://osvdb.org/77939 CVE-2011-5219
mPDF 5.3 - File Disclosure
Record summary
CVE-2011-5219 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBmPDF 5.3 - File DisclosureExploitDB exploitby ZadYreeNot analyzed1 file
References
547262Third-party advisory
http://secunia.com/advisories/47262 18248exploit
http://www.exploit-db.com/exploits/18248 mpdf-showcode-dir-traversal(71862)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/71862 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-5219