Vulnerabilities > Tftgallery

DATE CVE VULNERABILITY TITLE RISK
2009-11-09 CVE-2009-3912 Path Traversal vulnerability in Tftgallery 0.13
Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the album parameter.
network
low complexity
tftgallery CWE-22
5.0
5.0
2009-11-09 CVE-2009-3911 Cross-Site Scripting vulnerability in Tftgallery 0.13
Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the sample parameter.
network
tftgallery CWE-79
4.3
4.3
2009-11-02 CVE-2009-3833 Cross-Site Scripting vulnerability in Tftgallery 0.13
Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the album parameter.
network
tftgallery CWE-79
4.3
4.3