CVE-2013-6919
The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) a…
Published: 2014-12-27 · CVSS: Unscored
The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7