EUVD-2012-2910

Malware in sbrugna...

Code injection

PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file...

CVE-2012-2931

PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file...

PT-2020-7211

Name of the Vulnerable Software and Affected Versions TinyWebGallery versions prior to 1.8.8 Description The issue allows remote authenticated users with admin privileges to inject arbitrary PHP code into the .htusers.php file. This is possible due to a PHP code injection flaw in the software...

CVE-2012-2931: Improper Neutralization of Special Elements in Output Used by a Downstream Component

PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file...

CVE-2012-2930: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in TinyWebGallery TWG before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an adduser action to admin/index.php or 2 conduct static PHP code injection attacks in .htusers.php...