Product · phpThumb project

phpThumb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.9

CVE-2025-52994

phpThumb is vulnerable to Command Injection through its gif_outputAsJpeg function

gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. This is fixed in 1.7.23-202506081709.

phpThumb project phpThumb james-heinrich/phpthumb Packagist

Jul 11, 2025