CVE-2022-45010

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

CVE-2022-45010

CVE-2022-45010 affects the “Simple Phone Book/Directory Web App v1.0.” The vulnerability is a SQL injection exposed via the editid parameter on the endpoint /PhoneBook/edit.php. The available metrics list a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required,...

Exploit for Path Traversal in Tiny_File_Manager_Project Tiny_File_Manager

CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability...

CVE-2021-45010

creationtimestamp| type| source ---|---|--- 2022-03-15 15:19:17+00:00| seen| https://t.me/cibsecurity/38918 2026-08-12 17:00:05+00:00| published-proof-of-concept| Telegram/GUXSixzuv3Vrjniit-uuQf5FpPFrD2R6a9CWe3oaeMgck 2026-08-13 00:00:08+00:00| published-proof-of-concept|...

CVE-2021-45010

Tiny File Manager (prasathmani) contains a path traversal vulnerability in tinyfilemanager.php’s file-upload functionality up to v2.4.7. An authenticated user can upload PHP files and, due to a root-cause mismatch in the upload handler (saving via $_REQUEST['fullpath'] while validating via $_FILE...