CVE-2005-1898 The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpthumb | = 1.5 | No fix listed |
| phpthumb | = 1.5.1 | No fix listed |
| phpthumb | = 1.5.2 | No fix listed |
| phpthumb | = 1.5.3 | No fix listed |
References
- 15534 patch third-party-advisory
- sourceforge.net
- 13842 vdb-entry