CVE-2023-53939

概要

参考情報

• tinywebgallery.com · Product
• exploit-db.com/exploits/51442 · Exploit
• vulncheck.com/advisories/tinywebgallery-stored-cross-site-scripting-via-folder-name-parameter · Third Party Advisory

tinywebgallery のその他の脆弱性

• CVE-2023-53922緊急 9.8TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers t…
• CVE-2013-2631中 5.3TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive infor…
• CVE-2012-2931高 7.2PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the …
• CVE-2017-16635中 5.4In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote …
• CVE-2012-2932中 4.3Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web scri…