Skip to content
Noroxi

tftgallery records

3 published records for vendor tftgallery.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2009-3912
      21Monitor

      Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a ..%2F (encoded dot d

      MediumCVSS 5.0Proof of conceptEPSS 2%

      tftgallery · tftgalleryNov 9, 2009

    • CVE-2009-3911
      17Monitor

      Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML v

      MediumCVSS 4.3Proof of conceptEPSS 1%

      tftgallery · tftgalleryNov 9, 2009

    • CVE-2009-3833
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 4.3Proof of conceptEPSS 1%

      tftgallery · tftgalleryNov 2, 2009