Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: phpThumb project Component: Phpthumb Clear all filters
TI-2013-05684 CVE-2013-6919 · GHSA-3747-gjc9-vvg6

The default configuration of phpThumb before 1.7.12 has a false value for the…

Priority LOW 22

The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01191 Published 2014-12-27 Fixed in 1.7.12 CWE-918