Filtered by vendor Phpthumb Project Subscriptions
Filtered by product Phpthumb Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2016-10508 1 Phpthumb Project 1 Phpthumb 2024-09-16 N/A
Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php.
CVE-2013-6919 1 Phpthumb Project 1 Phpthumb 2024-08-06 N/A
The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.