CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

CVE-2014-5012: Undefined Security Weakness

DOMPDF before 0.6.2 allows denial of service...

PT-2020-7697 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows remote code execution. It is related to a previously identified problem. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...

CVE-2014-5011: Exposure of Sensitive Information to an Unauthorized Actor

DOMPDF before 0.6.2 allows Information Disclosure...

DOMPDF Remote Code Execution Vulnerability

DOMPDF is a converter to convert HTML to PDF. A remote code execution vulnerability exists in DOMPDF versions prior to 0.6.2. No details of the vulnerability are provided at this time...

DOMPDF Information Disclosure Vulnerability

DOMPDF is a converter to convert HTML to PDF. An information disclosure vulnerability exists in versions of DOMPDF prior to 0.6.2. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could exploit the vulnerabilit...

PT-2020-7696 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows for a denial of service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

PT-2020-7695 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows information disclosure. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...

CVE-2014-5013: Undefined Security Weakness

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

Cross-site Scripting (XSS)

dompdf is vulnerable to cross-site scripting XSS attacks. The library does not filter user-supplied strings through uploaded pdf files, allowing a malicious user to inject and execute arbitrary web script...

Arbitrary File Read

dompdf is vulnerable to arbitrary file read. A malicious user can bypass chroot protections with the PHP protocols and wrappers through the inputfile parameters...

parentzone.org.uk XSS vulnerability

Vulnerable URL: http://parentzone.org.uk/sites/all/libraries/dompdf/lib/php-font-lib/www/makesubset.php?fontfile=../fonts/indta1001.ttf=%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:42 GMT Vulnerability...

Information Disclosure

This release is superseded by version 0.7.0 This is a security-focused release that addresses a number of vulnerabilities that can expose your system to exploitation. In tandem with this release we have also posted a document to the wiki with advice for securing dompdf. Please read the new docume...

Denial Of Service Vector

This release is superseded by version 0.7.0 This is a security-focused release that addresses a number of vulnerabilities that can expose your system to exploitation. In tandem with this release we have also posted a document to the wiki with advice for securing dompdf. Please read the new docume...

TYPO3 Extension ke_dompdf 0.0.3 Remote Code Execution Vulnerability

The TYPO3 extension kedompdf contains a version of the dompdf library including all files originally supplied with it. This includes an examples page, which contains different examples for HTML-entities rendered as a PDF. This page also allows users to enter their own HTML code into a text box to...

TYPO3 Extension ke DomPDF - Remote Code Execution

TYPO3 Extension ke DomPDF - Remote Code Execution Advisory: Remote Code Execution in TYPO3 Extension kedompdf During a penetration test RedTeam Pentesting discovered a remote code execution vulnerability in the TYPO3 extension kedompdf, which allows attackers to execute arbitrary PHP commands in...

TYPO3 Extension ke_dompdf 0.0.3 Remote Code Execution

Advisory: Remote Code Execution in TYPO3 Extension kedompdf During a penetration test RedTeam Pentesting discovered a remote code execution vulnerability in the TYPO3 extension kedompdf, which allows attackers to execute arbitrary PHP commands in the context of the webserver. Details =======...

[RT-SA-2014-007] Remote Code Execution in TYPO3 Extension ke_dompdf

Advisory: Remote Code Execution in TYPO3 Extension kedompdf During a penetration test RedTeam Pentesting discovered a remote code execution vulnerability in the TYPO3 extension kedompdf, which allows attackers to execute arbitrary PHP commands in the context of the webserver. Details =======...

Code injection

Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-6235

The CVE-2014-6235 entry concerns the TYPO3 extension ke_dompdf. Affected Versions: 0.0.3 and earlier. Root cause: the extension ships an old dompdf library and includes an unprotected examples directory, enabling arbitrary PHP code execution on the server. Impact: remote code execution with high ...