TinyWebGallery 1.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:tinywebgallery:tinywebgallery:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

VendorTinywebgallery (da544668-331c-5b79-8a65-af2c208dd702)
ProductTinywebgallery (d848f0ce-2f76-5f72-bb27-fca023d539ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1911 vulnerable 2026-06-08 04:51:25.668840 Details available
Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php.
Published: 2009-06-04T16:00:00.000Z
Updated: 2024-08-07T05:27:54.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4166 vulnerable 2026-06-08 04:49:11.143919 Details available
PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2.
Published: 2006-08-16T21:00:00.000Z
Updated: 2024-08-07T18:57:46.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1802 vulnerable 2026-06-08 04:48:58.072492 Details available
Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twg_album parameter.
Published: 2006-04-18T10:00:00.000Z
Updated: 2024-08-07T17:27:28.687Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.