CVE-2010-4879

CVE-2010-4879 affects dompdf up to version 0.6.x: PHP remote file inclusion in dompdf.php via the input_file parameter allows remote attackers to execute arbitrary PHP code. The issue is publicly documented in Red Hat and FriendsOfPHP advisories; upstream fixes are in dompdf 0.7.0. Remediation: u...