296,213
Total vulnerabilities in the database
Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot dot) in the "include file" SSI directive. NOTE: this issue only might be a vulnerability in limited scenarios, such as if html2ps is invoked by a web application, or if a user-assisted attacker provides filenames whose contents could cause a denial of service, such as certain devices.
| Software | From | Fixed in |
|---|---|---|
| html2ps_project / html2ps | 1.0-b4 | 1.0-b4.x |
| html2ps_project / html2ps | 1.0-b1 | 1.0-b1.x |
| html2ps_project / html2ps | - | 1.0.x |
| html2ps_project / html2ps | 1.0-b3 | 1.0-b3.x |
| html2ps_project / html2ps | 1.0-b2 | 1.0-b2.x |