EDB-33004

functional

dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read

view exploit source exploit_dbverifiedtype webappsauthor Portcullispublished 2014-04-24catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-2383USmedium6.8Exploit
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol an…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan