CVE-2009-1911
04.06.2009, 16:30
Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php.
| Vendor | Product | Version |
|---|---|---|
| tinywebgallery | tinywebgallery | 𝑥 ≤ 1.7.6 |
| tinywebgallery | tinywebgallery | 1.0 |
| tinywebgallery | tinywebgallery | 1.1 |
| tinywebgallery | tinywebgallery | 1.01 |
| tinywebgallery | tinywebgallery | 1.1.1 |
| tinywebgallery | tinywebgallery | 1.1.2 |
| tinywebgallery | tinywebgallery | 1.02 |
| tinywebgallery | tinywebgallery | 1.2 |
| tinywebgallery | tinywebgallery | 1.3 |
| tinywebgallery | tinywebgallery | 1.03 |
| tinywebgallery | tinywebgallery | 1.3a:a |
| tinywebgallery | tinywebgallery | 1.3b:b |
| tinywebgallery | tinywebgallery | 1.3c:c |
| tinywebgallery | tinywebgallery | 1.04 |
| tinywebgallery | tinywebgallery | 1.4 |
| tinywebgallery | tinywebgallery | 1.4.0.1 |
| tinywebgallery | tinywebgallery | 1.4.0.2 |
| tinywebgallery | tinywebgallery | 1.4.0.3 |
| tinywebgallery | tinywebgallery | 1.4.0.4 |
| tinywebgallery | tinywebgallery | 1.4.1 |
| tinywebgallery | tinywebgallery | 1.4.1.1 |
| tinywebgallery | tinywebgallery | 1.4.1.2 |
| tinywebgallery | tinywebgallery | 1.4.1.3 |
| tinywebgallery | tinywebgallery | 1.4.2 |
| tinywebgallery | tinywebgallery | 1.05 |
| tinywebgallery | tinywebgallery | 1.5 |
| tinywebgallery | tinywebgallery | 1.5.0.1_15.08.2006:_15.08 |
| tinywebgallery | tinywebgallery | 1.5.0.2_17.08.2006:_17.08 |
| tinywebgallery | tinywebgallery | 1.5.1_03.09.2006:_03.09 |
| tinywebgallery | tinywebgallery | 1.5.2.1_20.09.2006_1000:_20.09 |
| tinywebgallery | tinywebgallery | 1.5.2.2_21.09.2006_1000:_21.09 |
| tinywebgallery | tinywebgallery | 1.5.2_17.09.2006_1000:_17.09 |
| tinywebgallery | tinywebgallery | 1.5.3.1_11.10.2006_1000:_11.10 |
| tinywebgallery | tinywebgallery | 1.5.3.2_12.10.2006_1000:_12.10 |
| tinywebgallery | tinywebgallery | 1.5.3_08.10.2006_1000:_08.10 |
| tinywebgallery | tinywebgallery | 1.5.4_13.10.2006:_13.10 |
| tinywebgallery | tinywebgallery | 1.5.5_30.10.2006_2200:_30.10 |
| tinywebgallery | tinywebgallery | 1.6 |
| tinywebgallery | tinywebgallery | 1.6.1 |
| tinywebgallery | tinywebgallery | 1.6.2 |
| tinywebgallery | tinywebgallery | 1.6.3 |
| tinywebgallery | tinywebgallery | 1.6.3.4 |
| tinywebgallery | tinywebgallery | 1.7 |
| tinywebgallery | tinywebgallery | 1.7.1 |
| tinywebgallery | tinywebgallery | 1.7.2-18.04.2008 |
| tinywebgallery | tinywebgallery | 1.7.3-12.05.2008 |
| tinywebgallery | tinywebgallery | 1.7.3.1 |
| tinywebgallery | tinywebgallery | 1.7.3.2 |
| tinywebgallery | tinywebgallery | 1.7.3.3 |
| tinywebgallery | tinywebgallery | 1.7.4 |
| tinywebgallery | tinywebgallery | 1.7.4.1 |
| tinywebgallery | tinywebgallery | 1.7.4.2 |
| tinywebgallery | tinywebgallery | 1.7.4.3 |
| tinywebgallery | tinywebgallery | 1.7.4.4 |
| tinywebgallery | tinywebgallery | 1.7.4.5 |
| tinywebgallery | tinywebgallery | 1.7.5 |
| tinywebgallery | tinywebgallery | 1.7.5.1 |
| claudio_klingler | quixplorer | 𝑥 ≤ 2.3.2 |
| claudio_klingler | quixplorer | 1.0 |
| claudio_klingler | quixplorer | 1.1 |
| claudio_klingler | quixplorer | 1.2 |
| claudio_klingler | quixplorer | 1.4 |
| claudio_klingler | quixplorer | 1.5 |
| claudio_klingler | quixplorer | 1.6 |
| claudio_klingler | quixplorer | 2.0 |
| claudio_klingler | quixplorer | 2.1.1 |
| claudio_klingler | quixplorer | 2.2 |
| claudio_klingler | quixplorer | 2.3 |
| claudio_klingler | quixplorer | 2.3.1 |
𝑥
= Vulnerable software versions
References