Skip to content
OpenAdvisories

Vendor

TinyWebGallery

2 known vulnerabilities.

Products

TinyWebGallery 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-53922

    TinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload

    TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code …

    TinyWebGallery TinyWebGallery