CVE-2014-4663

binarymoon timthumb Improper Control of Generation of Code ('Code Injection')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2014-4663 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.

Description

TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Oct 15, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

timthumb

Browse binarymoon / timthumb
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBMultiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) - 'WebShot' Remote Code ExecutionExploitDB exploitby @u0xNot analyzed1 file
ExploitDB
PoC details

References

9