TI-2025-32999 CVE-2025-52994 · GHSA-q745-cfqh-hcrw
OS command injection in phpThumb
Priority LOW 24
gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value.
Vulnerabilities
3 records
TI-2016-08550 CVE-2016-10508 · GHSA-6m4h-mpf7-wv84
Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow…
Priority LOW 29
Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php.
TI-2013-05684 CVE-2013-6919 · GHSA-3747-gjc9-vvg6
The default configuration of phpThumb before 1.7.12 has a false value for the…
Priority LOW 22
The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.