EIP-2026-112720
PRE-CVETinyWebGallery 1.8.3 - Multiple Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112720. PoCs published by Yam Mesicka.
AI-analyzed exploit summary The exploit demonstrates non-persistent XSS and directory traversal vulnerabilities in TinyWebGallery 1.8.3. It provides specific examples of malicious input for parameters like 'sview', 'tview', 'dir', and 'item' to trigger XSS and path traversal attacks.
Description
TinyWebGallery 1.8.3 - Multiple Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
by Yam Mesicka · textwebappsphp
https://www.exploit-db.com/exploits/16090
The exploit demonstrates non-persistent XSS and directory traversal vulnerabilities in TinyWebGallery 1.8.3. It provides specific examples of malicious input for parameters like 'sview', 'tview', 'dir', and 'item' to trigger XSS and path traversal attacks.
Classification
Working Poc 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
TinyWebGallery 1.8.3
No auth needed
Prerequisites:
Access to the admin interface of TinyWebGallery
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026