Exploitation Summary
CVE-2014-4663 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including @u0x.
AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in TimThumb 2.8.13 and WordThumb 1.07 via the WebShot feature. The vulnerability arises from insufficient input sanitization in the 'src' parameter, allowing arbitrary command execution through shell metacharacters.
Description
TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter.
Exploits (1)
This exploit demonstrates a command injection vulnerability in TimThumb 2.8.13 and WordThumb 1.07 via the WebShot feature. The vulnerability arises from insufficient input sanitization in the 'src' parameter, allowing arbitrary command execution through shell metacharacters.