140 matches found
CVE-2020-12102
In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the filesystem outside of the application scope...
CVE-2019-16790
In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only authenticated users are impacted...
Exploit for Path Traversal in Tinyfilemanager_Project Tinyfilemanager
TinyFileManager v2.6 - File Upload Extension Bypass to Remote...
EUVD-2019-7302
Malware in sbrugna...
EUVD-2020-4419
Malware in sbrugna...
EUVD-2020-4418
Malware in sbrugna...
EUVD-2022-28154
Malicious code in bioql PyPI...
EUVD-2022-48341
Malicious code in bioql PyPI...
EUVD-2022-48342
Malicious code in bioql PyPI...
EUVD-2022-43235
Malicious code in bioql PyPI...
EUVD-2022-44168
Malicious code in bioql PyPI...
EUVD-2022-43765
Malicious code in bioql PyPI...
Tiny File Manager Unauthenticated Access
Tiny File Manager is a web-based file manager written in PHP. It allows users to manage files on a web server through a simple and user-friendly interface. When authentication is not enforced, an attacker can access the File Browser interface without any credentials. This can lead to unauthorized...
Tiny File Manager Default Credentials
Tiny File Manager is a web-based file manager that allows users to manage files on a server through a web interface. By default, Tiny File Manager comes with a default username and password combination. If these default credentials are not changed, a remote and unauthenticated attacker could gain...
CVE-2022-45475
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control...
CVE-2022-45476
Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download. This is possible because the application is vulnerable to insecure file upload...
PT-2025-22818 · Unknown · Tiny File Manager
Name of the Vulnerable Software and Affected Versions: TinyFileManager version 2.4.7 Description: A stored cross-site scripting XSS issue in the /tinyfilemanager.php component allows attackers to execute arbitrary JavaScript or HTML by injecting a crafted payload into the js-theme-3 parameter. Th...
CVE-2021-45010
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot, leading to code execution...
CVE-2022-40490
Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting XSS vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file...