Tinywebgallery

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to (1) inc/filefunctions.inc or (2) info.php.CVE-2012-5347Tinywebgallery · 4.4% likely
2. PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php o…CVE-2006-4166Tinywebgallery · 3.7% likely
3. Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows rem…CVE-2009-1911Tinywebgallery · 2.5% likely

   CWE-22

4. Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twg_album parameter.CVE-2006-1802Tinywebgallery · 1.9% likely
5. TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twg_brow…CVE-2013-2631Tinywebgallery · 1.8% likely

   CWE-200

6. PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.CVE-2012-2931Tinywebgallery · 1.4% likely

   CWE-74

7. TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as…CVE-2011-3810Tinywebgallery · 1.2% likely

   CWE-200

8. Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter…CVE-2012-2932Tinywebgallery · 1.2% likely

   CWE-79

9. TinyWebGallery v2.5 Remote Code Execution via Unrestricted File UploadCVE-2023-53922TinyWebGallery · CVSS 9.8 · 1.1% likely

   CWE-434

10. Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for (1) index.php, (2…CVE-2007-4958Tinywebgallery · 1.0% likely

    CWE-79

11. In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote attackers with low-privilege user accou…CVE-2017-16635Tinywebgallery · 0.8% likely

    CWE-79

12. Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests…CVE-2012-2930Tinywebgallery · 0.7% likely

    CWE-352

13. TinyWebGallery v2.5 Stored Cross-Site Scripting via Folder Name ParameterCVE-2023-53939TinyWebGallery · CVSS 5.4 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.