Back to KEVs

CVE-2011-4106

TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and...

Basic Information

CVE State
PUBLISHED
Reserved Date
October 18, 2011
Published Date
October 26, 2013
Last Updated
September 16, 2024
Vendor
n/a
Product
TimThumb
Description
TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited in the wild in August 2011.
Tags
php

CVSS Scores

CVSS v2.0

6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploit Status

Exploited in the Wild
Yes (2013-10-26 16:00:00 UTC) Source

References

http://www.exploit-db.com/exploits/17872 http://www.binarymoon.co.uk/2011/08/timthumb-2/ http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/ http://www.openwall.com/lists/oss-security/2011/11/03/4 http://www.exploit-db.com/exploits/17602 http://code.google.com/p/timthumb/issues/detail?id=212 http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/

Known Exploited Vulnerability Information

Source Added Date
CVE 2013-10-26 16:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel