CVE-2012-2932: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TinyWebGallery TWG before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems parameter in a 1 copy, 2 chmod, or 3 arch action to admin/index.php or 4 searchitem parameter in a search action to admin/index.php...

PT-2015-3525

Name of the Vulnerable Software and Affected Versions TinyWebGallery versions prior to 1.8.8 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the selitems parameter in a copy, chmod, or arch action to "admin/index.php" or the searchite...

CVE-2013-1641

Directory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5 allows remote attackers to read arbitrary files via a .. dot dot in the selitems parameter in a downloadselected action to index.php...

PT-2014-2485

Name of the Vulnerable Software and Affected Versions QuiXplorer versions prior to 2.5.5 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the zip download functionality. This is achieved by using a .. dot dot in the selitems...

CVE-2013-1641: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5 allows remote attackers to read arbitrary files via a .. dot dot in the selitems parameter in a downloadselected action to index.php...