Vulnerabilities

TI-2009-03714 CVE-2009-3912 · GHSA-39qj-gvvr-x2cj

Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers…

LOW 28

Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the album parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02744 Published 2009-11-09 No fix listed CWE-22

TI-2009-03713 CVE-2009-3911 · GHSA-w4v6-644f-ccm7

Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the sample parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2009-11-09 No fix listed CWE-79

TI-2009-03641 CVE-2009-3833 · GHSA-gq4m-2x78-xxrg

Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the album parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01269 Published 2009-11-02 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers…

Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote…

Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote…