Lucene search
China National Vulnerability DatabaseCNVD-2021-80269HistorySep 17, 2021 - 12:00 a.m.
TinyFileManager cross-site request forgery vulnerability
2021-09-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
tinyfilemanager
cross-site request forgery
vulnerability
upload files
run os commands
administrator users
crafted url
security
EPSS
0.001
Percentile
41.1%
TinyFileManager is a web-based file manager. A cross-site request forgery vulnerability exists in TinyFileManager 2.4.6 and all versions below, which can be exploited by attackers to upload files and run operating system commands by tricking Administrator users into browsing an attacker-controlled URL.
Related
cve
cve
CVE-2021-40965
2021-09-15 18:15:09
cvelist
cvelist
CVE-2021-40965
2021-09-15 17:11:27
prion
prion
Cross site request forgery (csrf)
2021-09-15 18:15:00
nvd
nvd
CVE-2021-40965
2021-09-15 18:15:09