CVE-2014-6236: Lumonet PHP Include Project Lumonet PHP Include

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.

Affected products

• Lumonet PHP Include Project Lumonet PHP Include: version 1.2.0 only

Published 2014-09-11. Last modified 2026-06-17.