TinyWebGallery 1.8.3 - Multiple Vulnerabilities

Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples:...

TinyWebGallery 1.8.3 Remote File Inclusion

Exploit Title: TinyWebGallery v 1.8.3 Remote file include vulnerbility Google Dork: Photo Gallery powered by TinyWebGallery 1.8.3 Date: 26/1/2011 Author: DIES3L Software Link: http://www.tinywebgallery.com Version: v 1.8.3 Tested on: ubuntu + win7 Email : [email protected] Fichier : ibasic.inc.php...

TinyWebGallery Multiple Cross-Site Scripting Vulnerabilities

TinyWebGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow th...

Directory traversal

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

CVE-2009-1911

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

CVE-2009-1911: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

TinyWebGallery lang Parameter Local File Inclusion

The remote host is running TinyWebGallery, a web-based photo gallery application written in PHP. The version of TinyWebGallery installed on the remote host fails to filter user-supplied input to the 'lang' parameter of the 'admin/include/init.php' script before using it to include PHP code...

TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit

?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: travesti mail.....: travestiattravesti.in link.....: http://www.travesti.in details..: this...

TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit

No description provided by source. ?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

TinyWebGallery/QuiXplorer Local File Include Vulnerability

TinyWebGallery and QuiXplorer are prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks...

TinyWebGallery Detection

The TinyWebGallery, a free php based photo album / gallery is running at this host. OpenVAS Vulnerability Test $Id: TinyWebGallerydetect.nasl 5747 2017-03-28 12:18:28Z cfi $ TinyWebGallery Detection Authors Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free...

TinyWebGallery 1.7.6 - Local File Inclusion Remote Code Execution

TinyWebGallery 1.7.6 - Local File Inclusion Remote Code Execution ?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: EgiX mail.....:...

TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================================== TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit =========================================================== ?php /...

TinyWebGallery 1.7.6 Local File Inclusion

?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.tinywebgallery.com/ details..: this...

TinyWebGallery 1.7.6 - Local File Inclusion / Remote Code Execution

?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.tinywebgallery.com/ details..: this...

CVE-2007-4958

Multiple cross-site scripting XSS vulnerabilities in TinyWebGallery TWG 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for 1 index.php, 2 iframes/ilogin.php, and 3 iframes/itoptags.php. NOTE: the provenance of this information is unknown; the details are obtaine...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TinyWebGallery TWG 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for 1 index.php, 2 iframes/ilogin.php, and 3 iframes/itoptags.php. NOTE: the provenance of this information is unknown; the details are obtaine...

CVE-2007-4958

CVE-2007-4958 affects TinyWebGallery (TWG) 1.6.3.4. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the URI for index.php, i_frames/i_login.php, and i_frames/i_top_tags.php. The underlying cause is ...

CVE-2007-4958

Multiple cross-site scripting XSS vulnerabilities in TinyWebGallery TWG 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for 1 index.php, 2 iframes/ilogin.php, and 3 iframes/itoptags.php. NOTE: the provenance of this information is unknown; the details are obtaine...

CVE-2007-4958: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TinyWebGallery TWG 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for 1 index.php, 2 iframes/ilogin.php, and 3 iframes/itoptags.php. NOTE: the provenance of this information is unknown; the details are obtaine...