CVE-2009-5142 Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| binarymoon timthumb | <= 1.09 | No fix listed |
| prothemedesign mimbo pro | = 2.3.1 | No fix listed |
References
- packetstormsecurity.com exploit
- 71878 vdb-entry
- code.google.com exploit
- code.google.com patch