Path Disclosure Vulnerability in TinyWebGallery by TinyWebGallery

CVE-2013-2631

What is CVE-2013-2631?

TinyWebGallery versions 1.8.9 and earlier are susceptible to a path disclosure vulnerability that enables remote attackers to access sensitive information. This issue arises due to improper handling of the parameters 'twg_browserx' and 'twg_browsery' in the image.php page. Exploiting this vulnerability could lead to the exposure of system paths, aiding attackers in further compromising the web application. Developers using these affected versions should apply the necessary updates to mitigate the risks associated with this vulnerability.

References