MattWilcox/Adaptive-Images — Issue #27: Creating a folder with 777 opens your server up to any injection
Author: codepo8
Created: 2011-12-04 01:57:25+00:00
State: open

This is pretty much a spammers' dream come true. Any site running this script (and you can check from the requests that it does run) will allow an attacker to install their own scripts for zombie botnets and the like. Only the server will need to write to the cache, so it makes more sense to use the /tmp instead.