WordPress Timthumb Plugin timthumb目录任意文件上传漏洞

来源: MLIST

名称: [oss-security] 20111103 Re: CVE request: wordpress plugin timthumb before 2.0 remote code execution

链接:http://www.openwall.com/lists/oss-security/2011/11/03/4

来源: EXPLOIT-DB

名称: 17872

链接:http://www.exploit-db.com/exploits/17872

来源: EXPLOIT-DB

名称: 17602

链接:http://www.exploit-db.com/exploits/17602

来源: www.binarymoon.co.uk

链接:http://www.binarymoon.co.uk/2011/08/timthumb-2/

来源: markmaunder.com

链接:http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/

来源: markmaunder.com

链接:http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/

来源: code.google.com

链接:http://code.google.com/p/timthumb/issues/detail?id=212

来源: BID

名称: 48963

链接:http://www.securityfocus.com/bid/48963