CyberSecBulletin

TinyWebGallery vulnerabilities

We track 1 vulnerability in TinyWebGallery products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 17, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest TinyWebGallery vulnerabilities

  • 9.8 Critical severity

    TinyWebGallery: Unrestricted Upload of File with Dangerous Type

    CVE-2023-53922TinyWebGalleryEPSS 1.11%

    TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code o