Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an adduser action to admin/index.php or (2) conduct static PHP code injection attacks in .htusers.php via the user parameter to admin/index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TinyWebGallery 跨站请求伪造漏洞
Vulnerability Description
TinyWebGallery（TWG）是软件开发者Michael Dempfle所研发的一套基于Ajax、PHP和XML的开源相册，它提供文字和图片水印、幻灯片播放、图像上传和管理等功能。 TWG 1.8.8之前版本中存在跨站请求伪造漏洞。远程攻击者可通过对admin/index.php脚本执行adduser操作利用该漏洞添加用户；或借助admin/index.php脚本的‘user’参数利用该漏洞实施静态PHP代码注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A