CVE-2013-6919: Phpthumb Project Phpthumb

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.

Affected products

• Phpthumb Project Phpthumb: up to and including 1.7.11

Published 2014-12-27. Last modified 2026-06-17.