VULHUB ™

HTML::Merge is reported prone to a remote file disclosure vulnerability. The vulnerability presents itself due to a lack of sufficient sanitization performed on user-supplied data that is passed to the 'printsource.pl' script. It is reported that this vulnerability may be exploited by a remote attacker to specify an arbitrary web server readable file and have that file served to the attacker.

HTML::Merge is reported prone to a remote file disclosure vulnerability. The vulnerability presents itself due to a lack of sufficient sanitization performed on user-supplied data that is passed to the 'printsource.pl' script. It is reported that this vulnerability may be exploited by a remote attacker to specify an arbitrary web server readable file and have that file served to the attacker.