CVE-2022-28368 PoC — Dompdf 跨站脚本漏洞

Source

https://github.com/Henryisnotavailable/Dompdf-Exploit-RCE

Associated Vulnerability

Title: Dompdf 跨站脚本漏洞 (CVE-2022-28368)
Description:Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).

Description

An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine

Readme

# Dompdf-Exploit-RCE
An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine

Made to make the exploit less tedious and annoying.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →