Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-6235. PoCs published by RedTeam Pentesting.
AI-analyzed exploit summary The advisory describes a remote code execution vulnerability in the TYPO3 extension ke_dompdf, where an unprotected examples.php file allows arbitrary PHP code execution via user input. The vulnerability was fixed in the dompdf library in 2010 but persisted in the TYPO3 extension until version 0.0.5.
Description
Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.
Exploits (1)
The advisory describes a remote code execution vulnerability in the TYPO3 extension ke_dompdf, where an unprotected examples.php file allows arbitrary PHP code execution via user input. The vulnerability was fixed in the dompdf library in 2010 but persisted in the TYPO3 extension until version 0.0.5.