51 matches found
CVE-2026-37637
CVE-2026-37637 Proof of Concept for CVE-2026-37637 - Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload in filemanager.php. Overview CVE-2026-37637 is a Remote Code Execution vulnerability affecting Alexantr filemanager v1.0. The vulnerability exists in the...
CVE-2026-95499
A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function moveuploadedfile of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted upload. The attack can be executed remotely. The vendor was...
CVE-2026-95499 JosephChuks php-file-manager-with-code-editor filemanager.php move_uploaded_file unrestricted upload
A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function moveuploadedfile of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted upload. The attack can be executed remotely. The vendor was...
CVE-2026-95499 JosephChuks php-file-manager-with-code-editor filemanager.php move_uploaded_file unrestricted upload
A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function moveuploadedfile of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted upload. The attack can be executed remotely. The vendor was...
CVE-2026-95499
CVE-2026-95499 affects JosephChuks php-file-manager-with-code-editor up to version 3.0 . The flaw resides in the move_uploaded_file function within filemanager.php , where manipulation of the files argument permits unrestricted file upload by a remote, unauthenticated attacker. The CVSS v3.1 base...
EUVD-2026-84393
A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function moveuploadedfile of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted upload. The attack can be executed remotely. The vendor was...
CVE-2026-95499: Unrestricted Upload of File with Dangerous Type
A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function moveuploadedfile of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted upload. The attack can be executed remotely. The vendor was...
PT-2026-96727
Name of the Vulnerable Software and Affected Versions php-file-manager-with-code-editor versions prior to 3.1 Description A flaw in the move uploaded file function within the filemanager.php file allows for unrestricted file upload. This issue can be exploited remotely by manipulating the files...
CVE-2026-37637
An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component...
CVE-2026-37637: Improper Control of Generation of Code
An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component...
CVE-2026-37637
The Alexantr filemanager v1.0 is vulnerable to Remote Code Execution (RCE) due to unrestricted file upload in the filemanager.php component. The root cause is insufficient server-side validation of uploaded files, allowing an attacker to upload a malicious PHP file into a web-accessible directory...
PT-2026-53695
Name of the Vulnerable Software and Affected Versions Alexantr filemanager version 1.0 Description A remote attacker can execute arbitrary code through the filemanager.php component. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
CVE-2026-6496
A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...
EUVD-2026-23444
A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown functionality of the file /filemanager.php?p= ajax=true&type=upload of the component File Upload Handler. This manipulation of the argument uploadurl causes server-side request...
EUVD-2026-23437
A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...
CVE-2026-6497
A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown functionality of the file /filemanager.php?p= ajax=true&type=upload of the component File Upload Handler. This manipulation of the argument uploadurl causes server-side request...
CVE-2026-6496
A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...
CVE-2026-6496
A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...
CVE-2026-6496: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...