Silisoftware Phpthumb() — known CVE vulnerabilities

Every CVE whose affected-product data names Silisoftware Phpthumb(), ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2010-1598 — CVSS 6.8 (medium): phpThumb.php in phpThumb() 1.7.9 and possibly other versions, when ImageMagick is installed, allows remote attackers to execute arbitrary…
• CVE-2012-2910 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject arbitrary web script…