CVE-2010-5303: Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows…

PriorityP416medium4.3CVSS 2.0

AVNACMAuNCNIPAN

EPSS

0.94%

56.5th percentile

Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
binarymoon	timthumb	<= 1.09	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion

suricata·2010-07-30·CVSS 7.5

CVE-2008-1534 [HIGH] ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/footer.inc.php?"; nocase; content:"settings[footer]="; fast_pattern; nocase; http.uri.raw; url_decode; content:"|2e 2e 2f|"; reference:url,milw0rm.com/exploits/5303; reference:url,juniper.net/security/auto/vulnerabilities/vuln28421.html; reference:bugtraq,28421; reference:cve,CVE-2008-1534; classtype:web-application-attack; sid:2009659; rev:8; metadata:affected_product Web_Server_Applications, attack_target Server, created_at 2010_07_30, deployment Perimeter, deployment Inte

Suricata

ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion

suricata·2010-07-30·CVSS 7.5

CVE-2008-1534 [HIGH] ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/header.inc.php?"; fast_pattern; nocase; content:"settings[header]="; nocase; http.uri.raw; url_decode; content:"|2e 2e 2f|"; reference:url,milw0rm.com/exploits/5303; reference:url,juniper.net/security/auto/vulnerabilities/vuln28421.html; reference:bugtraq,28421; reference:cve,CVE-2008-1534; classtype:web-application-attack; sid:2009660; rev:8; metadata:affected_product Web_Server_Applications, attack_target Server, created_at 2010_07_30, deployment Perimeter, deployment Inte