gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. This is fixed in 1.7.23-202506081709.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| james-heinrich/phpthumb(Packagist) | 0 | N/A | N/A |
CVSS Metrics
