admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2009/CVE-2009-5067.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

922 B
Raw Blame History

CVE-2009-5067

Description

Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot dot) in the "include file" SSI directive. NOTE: this issue only might be a vulnerability in limited scenarios, such as if html2ps is invoked by a web application, or if a user-assisted attacker provides filenames whose contents could cause a denial of service, such as certain devices.

POC

Reference

Github

No PoCs found on GitHub currently.