CVE-2012-2931 PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.
HighCVSS 7.2
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tinywebgallery | < 1.8.8 | 1.8.8 |
References
- www.htbridge.com exploit third-party-advisory