Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
mPDF 7.0 - Local File Inclusion
Vulnerability Description
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)
Vulnerability Title
mPDF 安全漏洞
Vulnerability Description
mPDF是mPDF开源的一款使用PHP编写的用于将HTML转换成PDF文件的库。 mPDF 7.0版本存在安全漏洞，该漏洞源于注释文件参数存在本地文件包含漏洞，可能导致读取任意系统文件。
CVSS Information
N/A
Vulnerability Type
N/A