Skip to content
OpenAdvisories

Vendor

James Charlesworth

1 known vulnerabilities.

Products

TinyMCE Thumbnail Gallery 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2012-20002

    TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.php

    TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal…

    James Charlesworth TinyMCE Thumbnail Gallery Web / CMS