phpThumb - fltr Command Injection Detection (CVE-2010-1598)

Detects CVE-2010-1598 by injecting ;id; into phpThumb.php fltr=blur|... !/usr/bin/env python3 -- coding: utf-8 -- """phpThumb fltr command injection CVE-2010-1598.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

phpThumb - fltr Command Injection RCE (CVE-2010-1598)

Exploits CVE-2010-1598 by injecting shell commands into the fltr blur filter. !/usr/bin/env python3 -- coding: utf-8 -- """phpThumb fltr command injection CVE-2010-1598.""" import re from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

CVE-2010-1598: Improper Input Validation

phpThumb.php in phpThumb 1.7.9 and possibly other versions, when ImageMagick is installed, allows remote attackers to execute arbitrary commands via the fltr parameter, as discovered in the wild in April 2010. NOTE: the provenance of this information is unknown; the details are obtained solely fr...