CVE-2023-53922 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious P…
Critical CVSS: 9.3

CVE-2023-53922

TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code on the server by accessing the uploaded file's URL.
Vendor
Tinywebgallery
Product
Tinywebgallery
CWE
CWE-434
Yayın Tarihi
2025-12-17 23:15:51
Güncelleme
2025-12-24 16:50:20
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-434 Tinywebgallery CRITICAL Tinywebgallery 2025

Referanslar

http://www.tinywebgallery.com/ https://www.exploit-db.com/exploits/51443 https://www.vulncheck.com/advisories/tinywebgallery-remote-code-execution-via-unrestricted-file-upload https://www.exploit-db.com/exploits/51443