Description
The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.
References
- 15534 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=330469
- 13842 vdb-entry