İçeriğe atla
Noroxi

TinyWebGallery kayıtları

tinywebgallery üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%13
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 20
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2014-5014
    40Planlayın

    The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to

    KritikCVSS 9,8İstismar yokEPSS %4

    tinywebgallery · wordpress flash uploader25 Nis 2018

  • CVE-2023-53922
    37İzleyin

    TinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload

    KritikCVSS 9,3İstismar yokEPSS %1

    tinywebgallery · tinywebgallery17 Ara 2025

  • CVE-2012-5347
    31İzleyin

    TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to (1) inc/filefunc

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    tinywebgallery · tinywebgallery9 Eki 2012

  • CVE-2006-4166
    31İzleyin

    PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    tinywebgallery · tinywebgallery16 Ağu 2006

  • CVE-2009-1911
    28İzleyin

    Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGall

    OrtaCVSS 6,8Kavram kanıtıEPSS %3

    tinywebgallery · tinywebgallery4 Haz 2009

  • CVE-2012-2931
    28İzleyin

    PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the

    YüksekCVSS 7,2İstismar yokEPSS %1

    tinywebgallery · tinywebgallery9 Oca 2020

  • CVE-2012-2930
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authent

    OrtaCVSS 6,8İstismar yokEPSS %1

    tinywebgallery · tinywebgallery24 Nis 2015

  • CVE-2021-24953
    24İzleyin

    Advanced iFrame < 2022 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    tinywebgallery · advanced iframe7 Mar 2022

  • CVE-2013-2631
    22İzleyin

    TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive infor

    OrtaCVSS 5,3İstismar yokEPSS %2

    tinywebgallery · tinywebgallery3 Şub 2020

  • CVE-2017-16635
    21İzleyin

    In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module.

    OrtaCVSS 5,4İstismar yokEPSS %1

    tinywebgallery · tinywebgallery6 Kas 2017

  • CVE-2023-4775
    21İzleyin

    Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %1

    tinywebgallery · advanced iframe13 Kas 2023

  • CVE-2023-7069
    21İzleyin

    Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    tinywebgallery · advanced iframe1 Şub 2024

  • CVE-2023-51690
    21İzleyin

    WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    tinywebgallery · advanced iframe1 Şub 2024

  • CVE-2025-1440
    21İzleyin

    Advanced iFrame <= 2024.5 - Unauthenticated Settings Update

    OrtaCVSS 5,3İstismar yokEPSS %0

    tinywebgallery · advanced iframe26 Mar 2025

  • CVE-2024-24870
    21İzleyin

    WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    tinywebgallery · advanced iframe5 Şub 2024

  • CVE-2024-1341
    21İzleyin

    Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    tinywebgallery · advanced iframe29 Şub 2024

  • CVE-2025-1437
    21İzleyin

    Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    tinywebgallery · advanced iframe26 Mar 2025

  • CVE-2025-1439
    21İzleyin

    Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header

    OrtaCVSS 5,4İstismar yokEPSS %0

    tinywebgallery · advanced iframe26 Mar 2025

  • CVE-2011-3810
    20İzleyin

    TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the in

    OrtaCVSS 5,0İstismar yokEPSS %1

    tinywebgallery · tinywebgallery23 Eyl 2011

  • CVE-2023-53939
    20İzleyin

    TinyWebGallery v2.5 Stored Cross-Site Scripting via Folder Name Parameter

    OrtaCVSS 5,1İstismar yokEPSS %0

    tinywebgallery · tinywebgallery18 Ara 2025

  • CVE-2006-1802
    18İzleyin

    Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script o

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    tinywebgallery · tinywebgallery18 Nis 2006

  • CVE-2012-2932
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web scri

    OrtaCVSS 4,3İstismar yokEPSS %1

    tinywebgallery · tinywebgallery24 Nis 2015

  • CVE-2007-4958
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or

    OrtaCVSS 4,3İstismar yokEPSS %1

    tinywebgallery · tinywebgallery18 Eyl 2007