CVE-2011-4106

TimThumb timthumb.php before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache...

CVE-2011-4106

TimThumb timthumb.php before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache...

CVE-2011-4106

The TimThumb (timthumb.php) component, in versions prior to 2.0 , is vulnerable to remote code execution due to a design/logic flaw in source validation. The software fails to validate the entire source against its domain whitelist, allowing remote attackers to upload and execute arbitrary code. ...

CVE-2011-4106

creationtimestamp| type| source ---|---|--- 2011-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17602 2026-06-19 16:45:36+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a009c5fa-c459-4903-9955-a769dbabfd23 2026-06-23 14:04:09+00:00|...