Timthumb Security Vulnerabilities and Issues — Timthumb CVE List

Lucene search

BinarymoonTimthumb

3 matches found

CVE•added 2014/08/21 11:55 p.m.•35 views

CVE-2010-5303

Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString.

4.3CVSS5.8AI score0.00225EPSS

CVE•added 2014/08/21 11:55 p.m.•34 views

CVE-2009-5142

Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter.

4.3CVSS5.9AI score0.00285EPSS

CVE•added 2014/08/21 11:55 p.m.•27 views

CVE-2010-5302

Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.

4.3CVSS5.9AI score0.00225EPSS