Search vulnerabilities

Results 1

CVE-2014-4663

TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter.

CVSS 2.0 · 6.8 Medium EPSS 9.8% KEV · Not listed
Vendors
Products