Phpthumb

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpthumb records in CISA KEV

No Phpthumb vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Phpthumb · all components

TI-2005-01799 CVE-2005-1898 · GHSA-8hff-jrp9-jvfg

LOW 26

The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01373 Published 2005-06-08 No fix listed