What is CVE-2013-6919?

CVE-2013-6919 is a vulnerability in Phpthumb Project. Published 2014-12-27.

Is CVE-2013-6919 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Phpthumb Project

CVE-2013-6919

The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.

EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.

Affected products

Phpthumb_project Phpthumb
N/a — versions n/a

Public proof-of-concept exploits

connar/vulnerable_

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2013-6919?: CVE-2013-6919 is a vulnerability in Phpthumb Project. Published 2014-12-27.
Is CVE-2013-6919 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.