CVE-2012-2931

PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.

Date published : 2020-01-09

https://www.htbridge.com/advisory/HTB23093