A user reported a possible vulnerability in ibrowser and imanager through the use of phpThumb. The phpThumb version used in these plugin were a bit older, but much younger than the latest security report on phpThumb. imanager and ibrowser are now using phpThumb 1.76.

For those already using ibrowser or imanager: just remove the old folder phpThumb within imanager or ibrowser (with subfolders) and upload the new one.

I wasn't able to reproduce the bug and did not found new security leaks, but I wanted to be sure, so this is why I was taken action.

Don't forget to set chmods as described in the documentation.

phpThumb patch can be found HERE

Repacked ibrowser can be found HERE

Repacked imanager can be found HERE

Sorry for the inconvenience!