CVE-2005-1898: Phpthumb

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.

Affected products

• Phpthumb Phpthumb: version 1.5 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only

Published 2005-06-09. Last modified 2026-06-16.