CVE-2014-4663

TimThumb 2.8.13 and WordThumb 1.07 are vulnerable to remote code execution when the Webshot (or Webshots ) feature is enabled. The root cause is the improper handling of shell metacharacters within the src parameter , which allows remote attackers to execute arbitrary commands. This vulnerability...