What is CVE-2010-4879?

CVE-2010-4879 is a vulnerability in Digitaljunkies Dompdf, classified under Code Injection. Published 2011-10-07.

Is CVE-2010-4879 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Digitaljunkies Dompdf

CVE-2010-4879

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.054 (91.8th percentile) — read the EPSS interpretation.

Affected products

Digitaljunkies Dompdf — versions 0.6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

violinist-dev/symfony-cloud-security-checker

References

cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2010-4879?: CVE-2010-4879 is a vulnerability in Digitaljunkies Dompdf, classified under Code Injection. Published 2011-10-07.
Is CVE-2010-4879 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.