high7.2
CVE-2012-2931
PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.
Impact
PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tinywebgallery | Tinywebgallery | before 1.8.8 |