Security Advisory
CVE-2012-2931
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.