Critical updates for TinyWebGallery

Users of the PHP program TinyWebGallery should upgrade to the latest version 1.5.1 as soon as possible. After the publication of a critical flaw in August, the author has now discovered and fixed further critical vulnerabilities which could allow PHP code to be loaded and executed from external servers. Using the special "remote administration kits", an attacker could gain complete control of a vulnerable system.

See also:

• List of changes in TWG 1.5.1
• Security bulletin on Bugtraq

(ehe)