phpThumb project
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| phpThumb | 1 | – | Jul 11, 2025 |
Exploited and recent CVEs
- CVE-2025-52994 gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. This is fixed in 1.7.23-202506081709. 0.7%