OSVDB ID: 63551 Title: Tcpdf HTML Tag eval() Call Handling Arbitrary Command Execution |
Info |
|
|
Dates |
||||
|
|
Description |
Classification |
Attack Type:
Input Manipulation
Impact: Loss of Integrity Solution: Workaround, Upgrade Disclosure: Vendor Verified OSVDB: Web Related |
Solution |
Upgrade to version 4.9.006 or higher, as it has been reported to fix this vulnerability. It is also possible to temporarily work around the flaw by implementing the following workaround: Disable the "K_TCPDF_CALLS_IN_HTML" configuration option. |
Products |
Unknown or Incomplete |
References |
|
Credit |
Unknown or Incomplete |