CVE-2013-6919

The CVE-2013-6919 issue affects phpThumb prior to 1.7.12, where the default disable_debug option is incorrectly configured as false, enabling remote attackers to trigger Server-Side Request Forgery (SSRF) via the src parameter. Documented sources confirm the vulnerability condition (default confi...

CVE-2016-10508

The CVE-2016-10508 entry concerns phpThumb, a PHP library for image thumbnail creation. Affected versions are before 1.7.14, where multiple cross-site scripting (XSS) vulnerabilities exist in phpThumb() enabling remote attackers to inject arbitrary web script or HTML through parameters in the dem...