Security Advisory

CVE-2013-6919

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-12-27 18:00:00
Last updated 2024-08-06 17:53:45
Assigner mitre
State PUBLISHED

Description

The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.