CVE-2009-5142

Mô tả

Tham khảo

• packetstormsecurity.com/files/127724/WordPress-Gamespeed-Theme-Cross-Site-Scripting.html · Exploit
• osvdb.org/71878
• code.google.com/p/timthumb/issues/detail · Exploit
• code.google.com/p/timthumb/source/detail · Patch

Lỗ hổng khác của timthumb

• CVE-2010-5303TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple pro…
• CVE-2010-5302TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows …
• CVE-2014-4663TRUNG BÌNH 6.8TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell …
• CVE-2011-4106TRUNG BÌNH 6.8TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload a…