Phpthumb Security Vulnerabilities and Issues — Phpthumb CVE List

Lucene search

Phpthumb ProjectPhpthumb

2 matches found

CVE•added 2014/12/27 6:59 p.m.•31 views

CVE-2013-6919

The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.

4.3CVSS7AI score0.00243EPSS

CVE•added 2025/07/11 3:15 p.m.•12 views

CVE-2025-52994

gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. This is fixed in 1.7.23-202506081709.

4.9CVSS7.4AI score0.01148EPSS