Lucene search
K

67 matches found

Vulnrichment
Vulnrichment
added 2025/12/28 1:32 p.m.1 views

CVE-2025-15138 prasathmani TinyFileManager tinyfilemanager.php path traversal

A flaw has been found in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php. This manipulation of the argument fullpath causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and...

5.8CVSS6AI score0.00139EPSS
Exploits1References4
CVE
CVE
added 2025/12/28 1:32 p.m.10 views

CVE-2025-15138

TinyFileManager up to version 2.6 contains a path traversal flaw caused by manipulating the fullpath parameter in tinyfilemanager.php. The issue enables remote exploitation, with exploits published and the vendor reportedly unresponsive to disclosure. Public documents do not specify a patch versi...

7.2CVSS6AI score0.00139EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/12/28 12:0 a.m.1 views

TinyFileManager 路径遍历漏洞

TinyFileManager is a web-based file manager. It is used to store, upload, edit and manage files and folders online through a web browser. TinyFileManager has a path traversal vulnerability that stems from the parameter fullpath in the file tinyfilemanager.php failing to correctly filter special...

7.2CVSS5.8AI score0.00139EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/28 12:0 a.m.1 views

PT-2025-53651

Name of the Vulnerable Software and Affected Versions TinyFileManager versions up to 2.6 Description A path traversal flaw exists in TinyFileManager due to manipulation of the fullpath argument within the tinyfilemanager.php file. This allows for remote exploitation. The vendor was contacted...

5.8CVSS6.1AI score0.00139EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2021-28118

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.08442EPSS
Exploits5References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-28021

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00181EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-24350

Malicious code in bioql PyPI...

9.8CVSS8.8AI score0.00353EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-28120

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00206EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-28119

Malicious code in bioql PyPI...

9.3CVSS8.8AI score0.00134EPSS
Exploits0References2
CNVD
CNVD
added 2025/06/06 12:0 a.m.1 views

TinyFileManager Cross-Site Scripting Vulnerability

TinyFileManager is a web-based file manager. It is used for storing, uploading, editing and managing files and folders online through a web browser. TinyFileManager suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

6.1CVSS6AI score0.00181EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/05/25 12:18 a.m.11 views

CVE-2025-44998

A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...

6.1CVSS5.5AI score0.00181EPSS
Exploits2References1
OSV
OSV
added 2025/05/23 7:15 p.m.2 views

CVE-2025-44998

A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...

6.1CVSS5.2AI score0.00181EPSS
Exploits2References2
NVD
NVD
added 2025/05/23 7:15 p.m.13 views

CVE-2025-44998

A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...

6.1CVSS0.00181EPSS
Exploits2References2
GithubExploit
GithubExploit
added 2025/05/23 6:40 a.m.92 views

Exploit for Cross-site Scripting in Tinyfilemanager_Project Tinyfilemanager

CVE-2025-44998 Summary A stored cross-site scripting XS...

9.8CVSS5.9AI score0.0057EPSS
Exploits3
Cvelist
Cvelist
added 2025/05/23 12:0 a.m.8 views

CVE-2025-44998

A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...

0.00181EPSS
Exploits2References2
CVE
CVE
added 2025/05/23 12:0 a.m.53 views

CVE-2025-44998

CVE-2025-44998 is a stored XSS in TinyFileManager v2.4.7, triggered in the /tinyfilemanager.php component via the js-theme-3 parameter. The vulnerability allows injecting arbitrary JavaScript/HTML, with PoCs showing script execution across the page and up to the login screen. Public exploit/PoC e...

6.1CVSS5.9AI score0.00181EPSS
Exploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/23 12:0 a.m.6 views

CVE-2025-44998

A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...

5.9AI score0.00181EPSS
Exploits2References2
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.1 views

TinyFileManager 安全漏洞

TinyFileManager is a web-based file manager. It is used for storing, uploading, editing and managing files and folders online via a web browser. A security vulnerability exists in TinyFileManager version v2.4.7, which stems from a stored cross-site scripting vulnerability that could lead to the...

6.1CVSS5.9AI score0.00181EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/02/05 11:6 p.m.4 views

CVE-2022-1000

Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7...

9.8CVSS6.7AI score0.00353EPSS
Exploits1References1
Prion
Prion
added 2022/03/17 11:15 a.m.13 views

Path traversal

Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7...

7.5CVSS9.5AI score0.00353EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder