maGAZIn 2.0 (phpThumb.php src) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== maGAZIn 2.0 phpThumb.php src Remote File Disclosure Vulnerability =================================================================== \|/// \ - - // @ @...

CVE-2006-4738: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includespath parameter. NOTE: The relativescriptpath vector is already covered by CVE-2006-2270...

CVE-2006-4739: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the OriginalImageData parameter to phpthumb.php...

CVE-2005-1898: Undefined Security Weakness

The passthrough functionality in phpThumb.php in phpThumb before 1.5.4 allows remote attackers to read files that are not images...