CVE-2025-15264 FeehiCMS TimThumb timthumb.php server-side request forgery

A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2025-15264: Server-Side Request Forgery (SSRF)

A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery. The attack can be launched remotely. The exploit has been...

EUVD-2010-5262

Malware in sbrugna...

CVE-2010-5302

Cross-site scripting XSS vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 r88, as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...

Wordpress MyBand插件-timthumb.php文件-跨站脚本漏洞

No description provided by source...

copiouscash.com XSS vulnerability

Vulnerable URL: http://www.copiouscash.com/wp-content/themes/MoneyTheme/timthumb.php?src=111 .jpg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

viktorfrank.cz XSS vulnerability

Open Bug Bounty ID: OBB-70332 Description| Value ---|--- Affected Website:| viktorfrank.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site scripting

Cross-site scripting XSS vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 r88, as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...

CVE-2009-5142

Technical details of CVE-2009-5142 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-5303

CVE-2010-5303 describes a cross-site scripting (XSS) vulnerability in TimThumb before 1.15 (r85), specifically in the displayError function, where an attacker could inject arbitrary script/HTML via $errorString. Affected: TimThumb core used in multiple products. Impact: remote abuse of XSS. Mitig...

CVE-2010-5302

Cross-site scripting XSS vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 r88, as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...

PT-2014-2071

Name of the Vulnerable Software and Affected Versions TimThumb versions 1.09 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the src parameter in the timthumb.php file. This can be exploited by attackers to execute...

PT-2014-2102

Name of the Vulnerable Software and Affected Versions TimThumb versions prior to 1.15 r85 Description A cross-site scripting XSS issue exists due to a vulnerability in the displayError function in timthumb.php. This allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2009-5142: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter...

CVE-2010-5303: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 r85, as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString...

CVE-2010-5302: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 r88, as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...

WordPress MyBand Theme Cross Site Scripting

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress MyBand Theme Cross site scripting | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-08-03 | | Vendor Homepage :...

WordPress Gamespeed Theme Cross Site Scripting

Exploit Title : Wordpress Gamespeed Theme Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://www.dalih.net/ Date: 3/8/2014 Tested On : Linux , Windows Software Link : http://www.dalih.net/wordpress-themes/game-speed/...

Multiple Wordpress Plugin timthumb.php Vulnerabilites

No description provided by source. Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the timthumb.php librar...

WordPress MoneyTheme Cross Site Scripting / Shell Upload

Title : Wordpress MoneyTheme Themes XSS / Arbitrary File Upload Author : DevilScreaM Date : 10/27/2013 Category : Web Applications Type : PHP Vendor : http://themesjunction.com Link : http://themesjunction.com/theme/moneywordpresstemplate-17129.html Greetz : 0day-id.com | newbie-security.or.id |...