CVE-2012-2932

概要

参考情報

• osvdb.org/82962
• securityfocus.com/bid/54019
• tinywebgallery.com/forum/web-photo-gallery-news-f14/twg-1-8-8-is-available-t3274.html · Vendor Advisory
• htbridge.com/advisory/HTB23093 · Exploit

tinywebgallery のその他の脆弱性

• CVE-2023-53939中 5.4TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts thr…
• CVE-2023-53922緊急 9.8TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers t…
• CVE-2013-2631中 5.3TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive infor…
• CVE-2012-2931高 7.2PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the …
• CVE-2017-16635中 5.4In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote …