CVE-2011-4106

TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited in the wild in August 2011.

TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited in the wild in August 2011.

TimThumb (timthumb.php) anterior a la versión 2.0 no valida toda la fuente con el dominio en lista blanca, lo que permite a atacantes remotos subir y ejecutar código arbitrario a través de una URL que contenga dominios en lista blanca en el parámetro src, después acceder a él a través de una petición directa al archivo en el directorio caché, como se explotó masivamente en agosto de 2011.