CVE-2011-4106

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

11.62%

Published

Oct 26, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (3)

All weaponized →

TrickestTrickest PoC index Exploit-DBMultiple WordPress Plugins - 'timthumb.php' File Upload Exploit-DBWordPress Plugin TimThumb 1.32 - Remote Code Execution

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited in the wild in August 2011.

Weaknesses (CWE)

CWE-20

Affected Products (1)

binarymoon · timthumbvulnerable

References (14)

http://code.google.com/p/timthumb/issues/detail?id=212

ExploitPatch

http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/

http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/

Patch

http://www.binarymoon.co.uk/2011/08/timthumb-2/

http://www.exploit-db.com/exploits/17602