CVE-2018-1000207

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

CVE-2018-1000207

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

PT-2018-9375

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.6.5 Description The issue is related to incorrect access control in filtering user parameters before passing them into the phpthumb class, which can result in creating a file with a custom filename and...

CVE-2018-1000207: Incorrect Permission Assignment for Critical Resource

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

phpThumb() Cross-Site Scripting Vulnerability

phpThumb is a PHP library for creating thumbnails. The library uses a few lines of code to be able to create thumbnails and support for rotating, cropping, watermarking and so on. A cross-site scripting vulnerability exists in versions of phpThumb prior to 1.7.14. A remote attacker can exploit th...

CVE-2016-10508

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

CVE-2016-10508

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

CVE-2016-10508

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

CVE-2016-10508

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

CVE-2016-10508

The CVE-2016-10508 entry concerns phpThumb, a PHP library for image thumbnail creation. Affected versions are before 1.7.14, where multiple cross-site scripting (XSS) vulnerabilities exist in phpThumb() enabling remote attackers to inject arbitrary web script or HTML through parameters in the dem...

CVE-2016-10508: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

PT-2017-7906

Name of the Vulnerable Software and Affected Versions phpThumb versions prior to 1.7.14 Description The issue allows remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php. This is due to multiple cross-site scripting XSS vulnerabilities in...

phpThumb Server-Side Request Forgery Vulnerability

phpThumb is a PHP class used to generate thumbnails of images. Versions of phpThumb prior to 1.7.12 configure the disabledebug option with a default value of false, which allows remote attackers to perform server-side request forgery SSRF attacks via the src parameter...

CVE-2013-6919

The default configuration of phpThumb before 1.7.12 has a false value for the disabledebug option, which allows remote attackers to conduct Server-Side Request Forgery SSRF attacks via the src parameter...

Server side request forgery (ssrf)

The default configuration of phpThumb before 1.7.12 has a false value for the disabledebug option, which allows remote attackers to conduct Server-Side Request Forgery SSRF attacks via the src parameter...

CVE-2013-6919

The default configuration of phpThumb before 1.7.12 has a false value for the disabledebug option, which allows remote attackers to conduct Server-Side Request Forgery SSRF attacks via the src parameter...

CVE-2013-6919

The CVE-2013-6919 issue affects phpThumb prior to 1.7.12, where the default disable_debug option is incorrectly configured as false, enabling remote attackers to trigger Server-Side Request Forgery (SSRF) via the src parameter. Documented sources confirm the vulnerability condition (default confi...

PT-2014-3216

Name of the Vulnerable Software and Affected Versions phpThumb versions prior to 1.7.12 Description The issue concerns the default configuration of phpThumb, where the disable debug option is set to false, allowing remote attackers to conduct Server-Side Request Forgery SSRF attacks. This is...

CVE-2013-6919: Undefined Security Weakness

The default configuration of phpThumb before 1.7.12 has a false value for the disabledebug option, which allows remote attackers to conduct Server-Side Request Forgery SSRF attacks via the src parameter...