This is a script I made which scrapes the web using dorks to find domains that still use vulnerable versions of the phpThumb php script.
phpThumb is basically a PHP script that provides image resizing, cropping, and manipulation capabilities for web applications when loading images basically. It is often used as a server-side image processing solution to generate thumbnails, resize images, apply filters, and perform other image-related tasks dynamically.
Turns out specific versions of this php script are vulnerable to RCE and SSRF. Specifically:
- versions ranging from 1.7.9 and bellow are vulnerable to RCE (CVE-2010-1598).
- version 1.7.12 is vulnerable to SSRF (CVE-2013-6919).
Running the script we get a table with some of the domains found, their phpThumb versions (if found) and the vulnerability that they probably have:
