TinyWebGallery <= 1.5 (image) Remote Include Vulnerabilities

No description provided by source. C Y B E R - W A R R i O R T I M TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------------ Author: xoron ------------------------------------------------------------------------------...

TinyWebGallery 1.8.3 - Multiple Vulnerabilities

No description provided by source. Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples...

TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit

No description provided by source. ?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

[ISecAuditors Security Advisories] Multiple Full Path Disclosure Vulnerabilities in TinyWebGallery &lt;= v1.8.9

============================================= INTERNET SECURITY AUDITORS ALERT 2013-012 - Original release date: March 19th, 2013 - Last revised: April 6th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 5/10 CVSS Base Score - CVE-ID: CVE-2013-2631...

TinyWebGallery 1.8.9 Path Disclosure

============================================= INTERNET SECURITY AUDITORS ALERT 2013-012 - Original release date: March 19th, 2013 - Last revised: April 6th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 5/10 CVSS Base Score - CVE-ID: CVE-2013-2631...

CVE-2012-5347

TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to 1 inc/filefunctions.inc or 2 info.php...

Command injection

TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to 1 inc/filefunctions.inc or 2 info.php...

CVE-2012-5347

The CVE-2012-5347 entry concerns TinyWebGallery 1.8.3, where remote attackers can execute arbitrary code by supplying shell metacharacters in the command parameter to (1) inc/filefunctions.inc or (2) info.php. The vulnerability constitutes a command-injection flaw that can be triggered over the n...

CVE-2012-5347

TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to 1 inc/filefunctions.inc or 2 info.php...

Multiple vulnerabilities in TinyWebGallery

Advisory ID: HTB23093 Product: TinyWebGallery Vendor: www.tinywebgallery.com Vulnerable Versions: 1.8.7 and probably prior Tested Version: 1.8.7 Vendor Notification: 23 May 2012 Vendor Patch: 24 May 2012 Public Disclosure: 13 June 2012 Vulnerability Type: Сross-Site Request Forgery CSRF, Arbitrar...

Multiple vulnerabilities in TinyWebGallery

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in TinyWebGallery, which can be exploited to perform Сross-Site Request Forgery CSRF, Arbitrary Code Execution and Cross-Site Scripting XSS attacks. 1 Сross-Site Request Forgery CSRF in TinyWebGallery: CVE-2012-2930...

TinyWebGallery 1.8.3 Remote Command Execution

» TinyWebGallery 1.8.3 Remote Command Execution » --- Date : 05- 01- 2012 » --- Author : Expl0!Ts -------- My Best t34m ----- "BaC , RoBert MilEs , Bl4ckID" » --- Software Link : http://www.tinywebgallery.com/dl.php?file=twglatest » --- Version: n/a » --- Category: php » --- Tested on: wind xp...

TinyWebGallery 1.8.3 Remote Command Execution

Exploit for php platform in category web applications » TinyWebGallery 1.8.3 Remote Command Execution » --- Date : 05- 01- 2012 » --- Author : Expl0!Ts -------- My Best t34m ----- "BaC , RoBert MilEs , Bl4ckID" » --- Software Link : http://www.tinywebgallery.com/dl.php?file=twglatest » --- Versio...

TinyWebGallery 1.8.3 - Remote Command Execution

TinyWebGallery 1.8.3 - Remote Command Execution » TinyWebGallery 1.8.3 Remote Command Execution » --- Date : 05- 01- 2012 » --- Author : Expl0!Ts -------- My Best t34m ----- "BaC , RoBert MilEs , Bl4ckID" » --- Software Link : http://www.tinywebgallery.com/dl.php?file=twglatest » --- Version: n/a...

CVE-2011-3810

TinyWebGallery TWG 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by iframes/iregister.php...

Design/Logic Flaw

TinyWebGallery TWG 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by iframes/iregister.php...

CVE-2011-3810

TinyWebGallery (TWG) 1.8.3 is vulnerable to an information-disclosure flaw: a remote attacker can trigger a direct request to a PHP file (e.g., i_frames/i_register.php) and cause an error message to reveal the installation path. The vulnerability affects the confidentiality of the system (PARTIAL...

CVE-2011-3810

TinyWebGallery TWG 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by iframes/iregister.php...

TinyWebgallery v1.8.4 (Flash-uploader) Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

TinyWebGallery 1.8.4 SQL Injection / Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...