CVE-2012-2930: Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remot...

Security readout for executives and security teams

TinyWebGallery versions before 1.8.8 had CSRF flaws that could let an attacker abuse an administrator's browser session. If an admin was tricked into making malicious requests, the attacker could add a user or inject static PHP code through administrative functionality. Exposure is likely limited to organizations still running TinyWebGallery before 1.8.8, especially where the administrative interface is reachable by browser sessions that may visit untrusted content. Treat this as a targeted legacy-web-app risk. It is most urgent if TWG is internet-facing, still used operationally, or administered from shared browsing environments. Mitigation focus: Upgrade TinyWebGallery to 1.8.8 or later per vendor release guidance.; Restrict access to the TWG administrative interface to trusted networks or users.; Review existing TWG administrative users for unauthorized additions..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.