EIP-2026-111220

This is a writeup describing an information disclosure vulnerability in phpThumb 1.7.9. The vulnerability allows attackers to disclose system paths, OS details, and configuration information by appending a debug parameter to the request.