TI-2014-03844 CVE-2014-4663 · GHSA-qmf7-fj73-rx79TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote…Priority MEDIUM 42TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0975 · Published 2014-07-15 · No fix listed CWE-94