CVE-2014-4663

TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in…

published July 15, 2014

CVSS

—

EPSS

10%

Percentile

95.5

In the wild

Unconfirmed

What it is

TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.09750 · 95.5th percentile
Published: 2014-07-15T14:00Z

EPSS history

Timeline

15 JUL 14:00Z
TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in…
cvelistv5