CVE-2014-6236
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for...
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.
- Record
CVE-2014-6236- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.
- Record
CVE-2014-6236- Updated
- 2026-11-02
EUVDEUVD-2014-6122 No score
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.
- Record
EUVD-2014-6122- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-62g9-g8r7-w36p No score
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for...
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.
- Record
GHSA-62g9-g8r7-w36p- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-6236 is a high vulnerability (CVSS 7.5) in Lumonet Php Include Project Php Include, published September 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/95707
securityfocus.com/bid/69569
typo3.org/extensions/repository/view/lumophpinclude
secunia.com/advisories/60873
nvd.nist.gov/vuln/detail/CVE-2014-6236
github.com/advisories/GHSA-62g9-g8r7-w36p