Tinywebgallery Tinywebgallery vulnerabilities

• tinywebgallery TinyWebGallery v2.5 Stored Cross-Site Scripting via Folder Name Parameter CVE-2023-53939 5.1 MediumDecember 18, 2025
• tinywebgallery TinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload CVE-2023-53922 9.3 CriticalDecember 17, 2025
• tinywebgallery TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows... CVE-2013-2631 5.3 MediumFebruary 3, 2020
• tinywebgallery PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin... CVE-2012-2931 7.2 HighJanuary 9, 2020
• tinywebgallery In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item`... CVE-2017-16635 5.4 MediumNovember 6, 2017
• tinywebgallery Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow... CVE-2012-2932 4.3 MediumApril 24, 2015
• tinywebgallery Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8... CVE-2012-2930 6.8 MediumApril 24, 2015
• tinywebgallery TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters... CVE-2012-5347 Public exploit 7.5 HighOctober 9, 2012
• tinywebgallery TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct... CVE-2011-3810 5.0 MediumSeptember 24, 2011
• claudio klingler quixplorer, tinywebgallery +1 more Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in... CVE-2009-1911 Public exploit 6.8 MediumJune 4, 2009
• tinywebgallery Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote... CVE-2007-4958 4.3 MediumSeptember 18, 2007
• tinywebgallery PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers... CVE-2006-4166 Public exploit 7.5 HighAugust 16, 2006
• tinywebgallery Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote... CVE-2006-1802 Public exploit 4.3 MediumApril 18, 2006