GCVE-110-MAGEIA-2017-67

Advisory Published

Vulnetix · Advisory published February 26, 2017

A local file inclusion vulnerability in TCPDF allows to upload files from the server generating PDF files to an external FTP server (CVE-2017-6100). The updated php-tcpdf-6.0.098-1.1.mga5 package fixes this issue by setting K_TCPDF_CALLS_IN_HTML configuration parameter to false by default.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	php-tcpdf	0 (affected), 6.0.098-1.1.mga5 (unaffected)	—

References

Updated php-tcpdf packages fix security vulnerability

advisory

Updated php-tcpdf packages fix security vulnerability

issue

Browse GCVE Records

20,323 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON