oss-sec mailing list archives
CVE request: timthumb remote code execution
From: Hanno Böck <hanno () hboeck de>
Date: Wed, 25 Jun 2014 11:56:55 +0200
The timthumb code, used by a countless number of wordpress themes, has (again) a remote code execution vulnerability: http://seclists.org/fulldisclosure/2014/Jun/117 All details there. This affects the very latest upstream version 2.8.13, I just opened an upstream bug: https://code.google.com/p/timthumb/issues/detail?id=485&thanks=485&ts=1403690188 No fix available at the moment. -- Hanno Böck http://hboeck.de/ mail/jabber: hanno () hboeck de GPG: BBB51E42
Attachment:
signature.asc
Description:
Current thread:
- CVE request: timthumb remote code execution Hanno Böck (Jun 25)
- Re: CVE request: timthumb remote code execution Hanno Böck (Jun 25)
- Re: CVE request: timthumb remote code execution cve-assign (Jun 27)