Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2014-5014

The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in image_magic_path.

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Tinywebgallery
Products
Wordpress Flash Uploader
CVE-2013-2631

TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twg_browserx" and "twg_browsery" in the page image.php.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Tinywebgallery
Products
Tinywebgallery
CVE-2012-2931

PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Tinywebgallery
Products
Tinywebgallery