CVE-2025-52994 – Apache PhpThumb OS Command Injection

CVE ID : CVE-2025-52994

Published : July 11, 2025, 3:15 p.m. | 59 minutes ago

Description : gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. This is fixed in 1.7.23-202506081709.

Severity: 4.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…