TinyWebGallery Multiple Cross Site Request Forgery and PHP Code Injection Vulnerabilities

Bugtraq ID:	74371
Class:	Input Validation Error
CVE:	CVE-2012-2930 CVE-2012-2931
Remote:	Yes
Local:	No
Published:	Jun 13 2012 12:00AM
Updated:	Jun 13 2012 12:00AM
Credit:	High-Tech Bridge Security Research Lab
Vulnerable:	Tiny Web Gallery Tiny Web Gallery 1.8.7
Not Vulnerable:	Tiny Web Gallery Tiny Web Gallery 1.8.8

TinyWebGallery Multiple Cross Site Request Forgery and PHP Code Injection Vulnerabilities

TinyWebGallery is prone to multiple cross-site request-forgery vulnerabilities and a PHP code-injection vulnerability.

Exploiting these issues may allow a remote attacker to perform certain unauthorized actions and to inject and execute arbitrary PHP code in the context of the affected application.

TinyWebGallery 1.8.7 is vulnerable; other versions may also be affected.

TinyWebGallery Multiple Cross Site Request Forgery and PHP Code Injection Vulnerabilities

An attacker can exploit these issues using browser. To exploit cross-site request-forgery issues, an attacker must entice an unsuspecting victim to follow a malicious URI or visit a malicious website.

TinyWebGallery Multiple Cross Site Request Forgery and PHP Code Injection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TinyWebGallery Multiple Cross Site Request Forgery and PHP Code Injection Vulnerabilities

References:

• Current build of TWG 1.8.8 is available (TinyWebGallery)
  
• TinyWebGallery Homepage (TinyWebGallery)
  
• Multiple vulnerabilities in TinyWebGallery (High-Tech Bridge SA)