- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 medium
- Registry
- Packagist
Advisories 2
- CVE-2025-52994Medium 4.9
gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value.
Affected: through 1.7.23.
- CVE-2013-6919Unrated
The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to…
Affected: fixed in 1.7.12.