Lucene search
MitreCVELIST:CVE-2014-2383HistoryApr 28, 2014 - 12:00 a.m.
CVE-2014-2383
2014-04-2800:00:00
mitre
www.cve.org
3
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.
References
seclists.org/fulldisclosure/2014/Apr/258
www.securityfocus.com/archive/1/531912/100/0/threaded
explore.avertium.com/resource/lfi-rfi-escalation-to-rce
github.com/dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028
www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/
Related
prion
prion
Design/Logic Flaw
2014-04-28 14:09:00
Remote code execution
2020-01-10 06:15:00
patchstack
patchstack
wpexploit
wpexploit
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
2020-03-24 00:00:00
ubuntucve
ubuntucve
CVE-2014-2383
2014-04-28 00:00:00
CVE-2014-5013
2020-01-10 00:00:00
zdt
zdt
dompdf 0.6.0 Arbitrary File Read Vulnerability
2014-04-24 00:00:00
packetstorm
packetstorm
dompdf 0.6.0 Arbitrary File Read
2014-04-23 00:00:00
nvd
nvd
CVE-2014-2383
2014-04-28 14:09:06
CVE-2014-5013
2020-01-10 06:15:11
debiancve
debiancve
CVE-2014-2383
2014-04-28 14:09:06
CVE-2014-5013
2020-01-10 06:15:11
seebug
seebug
dompdf 0.6.0 (dompdf.php, read param) - Arbitrary File Read
2014-07-01 00:00:00
securityvulns
securityvulns
CVE-2014-2383 - Arbitrary file read in dompdf
2014-05-04 00:00:00
github
github
DOMPDF Arbitrary File Read
2022-05-14 02:53:19
DOMPDF Remote Code Execution
2022-05-17 19:57:15
wpvulndb
wpvulndb
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
2020-03-24 00:00:00
cve
cve
CVE-2014-2383
2014-04-28 14:09:06
CVE-2014-5013
2020-01-10 06:15:11
osv
osv
DOMPDF Arbitrary File Read
2022-05-14 02:53:19
DOMPDF Remote Code Execution
2022-05-17 19:57:15
exploitpack
exploitpack
dompdf 0.6.0 - dompdf.php?read Arbitrary File Read
2014-04-24 00:00:00
veracode
veracode
Arbitrary File Read
2017-07-18 21:44:37
nuclei
nuclei
Dompdf < v0.6.0 - Local File Inclusion
2021-06-10 09:45:21
friendsofphp
friendsofphp
Arbitrary file read in dompdf
2014-03-10 21:57:58
PHP remote file inclusion vulnerability in dompdf.php
2014-03-10 21:57:58
Information Disclosure
2015-12-07 00:07:13
exploitdb
exploitdb
dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read
2014-04-24 00:00:00
cvelist
cvelist
CVE-2014-5013
2020-01-10 05:25:00
nessus
nessus