TI
Product
TinyWebGallery
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch
Add TinyWebGallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-53922 | 9.8 | Dec 17 | TinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload Affected: 2.5 |
| CVE-2012-2931 | 7.2 | Jan 9 | PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file Affected: before 1.8.8 |
| CVE-2023-53939 | 5.4 | Dec 18 | TinyWebGallery v2.5 Stored Cross-Site Scripting via Folder Name Parameter Affected: 2.5 |
| CVE-2017-16635 | 5.4 | Nov 6 | In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module Affected: 2.4 |
| CVE-2013-2631 | 5.3 | Feb 3 | TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters… Affected: through 1.8.9 |
| CVE-2012-2932 | – | Apr 24 | Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter… Affected: through 1.8.6 |
| CVE-2012-2930 | – | Apr 24 | Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests… Affected: through 1.8.6 |
| CVE-2012-5347 | – | Oct 9 | TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to (1) inc/filefunctions.inc or (2) info.php Affected: 1.8.3 |
| CVE-2011-3810 | – | Sep 24 | TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as… Affected: 1.8.3 |
| CVE-2009-1911 | – | Jun 4 | Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows… Affected: through 1.7.6; 1.0; 1.1; 1.01; 1.1.1; 1.1.2; +34 more |
| CVE-2007-4958 | – | Sep 18 | Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for (1) index.php,… Affected: 1.6.3.4 |
| CVE-2006-4166 | – | Aug 16 | PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php… Affected: through 1.5; 1.3; 1.4 |
| CVE-2006-1802 | – | Apr 18 | Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twg_album parameter Affected: 1.3; 1.4 |
Showing 13