| Package | Affected versions | Patched versions |
|---|---|---|
| timthumb | = 2.8.13 | |
| wordthumb | = 1.07 |
TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free