mPDF "filename" Local File Inclusion Vulnerability


Description   A vulnerability has been discovered in mPDF, which can be exploited by malicious people to disclose sensitive information.
Input passed to the "filename" parameter in examples/show_code.php is not properly verified before being used to return file contents within a PDF document. This can be exploited to disclose arbitrary files from local resources via directory traversal attacks.
The vulnerability is confirmed in version 5.3. Other versions may also be affected.
     
Vulnerable Products   Vulnerable Software:
mPDF 5.x
     
Solution   Remove the "examples" directory.
     
CVE  
     
References   http://www.exploit-db.com/exploits/18248/
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Misc : Directory traversal - parameter starting with ../
3.2.0
PHP : Remote file inclusion prevention : suspicious root_path parameter found in URL
3.2.0
Directory traversal using ..\..
3.2.0
Directory traversal
3.2.0
PHP : Remote file inclusion prevention : URL found as parameter
3.2.0
Directory traversal backward root folder
3.2.0
Misc : Local File Inclusion - suspicious /etc/passwd found in URL
3.5.0
     


 
 
 
 
 Risk level 
Low 

 Vulnerability First Public Report Date 
2011-12-19 

 Target Type 
Server 

 Possible exploit 
Remote