67 matches found
CVE-2025-15138 prasathmani TinyFileManager tinyfilemanager.php path traversal
A flaw has been found in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php. This manipulation of the argument fullpath causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and...
CVE-2025-15138
TinyFileManager up to version 2.6 contains a path traversal flaw caused by manipulating the fullpath parameter in tinyfilemanager.php. The issue enables remote exploitation, with exploits published and the vendor reportedly unresponsive to disclosure. Public documents do not specify a patch versi...
TinyFileManager 路径遍历漏洞
TinyFileManager is a web-based file manager. It is used to store, upload, edit and manage files and folders online through a web browser. TinyFileManager has a path traversal vulnerability that stems from the parameter fullpath in the file tinyfilemanager.php failing to correctly filter special...
PT-2025-53651
Name of the Vulnerable Software and Affected Versions TinyFileManager versions up to 2.6 Description A path traversal flaw exists in TinyFileManager due to manipulation of the fullpath argument within the tinyfilemanager.php file. This allows for remote exploitation. The vendor was contacted...
EUVD-2021-28118
Malicious code in bioql PyPI...
EUVD-2025-28021
Malicious code in bioql PyPI...
EUVD-2022-24350
Malicious code in bioql PyPI...
EUVD-2021-28120
Malicious code in bioql PyPI...
EUVD-2021-28119
Malicious code in bioql PyPI...
TinyFileManager Cross-Site Scripting Vulnerability
TinyFileManager is a web-based file manager. It is used for storing, uploading, editing and managing files and folders online through a web browser. TinyFileManager suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...
CVE-2025-44998
A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...
CVE-2025-44998
A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...
CVE-2025-44998
A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...
Exploit for Cross-site Scripting in Tinyfilemanager_Project Tinyfilemanager
CVE-2025-44998 Summary A stored cross-site scripting XS...
CVE-2025-44998
A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...
CVE-2025-44998
CVE-2025-44998 is a stored XSS in TinyFileManager v2.4.7, triggered in the /tinyfilemanager.php component via the js-theme-3 parameter. The vulnerability allows injecting arbitrary JavaScript/HTML, with PoCs showing script execution across the page and up to the login screen. Public exploit/PoC e...
CVE-2025-44998
A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...
TinyFileManager 安全漏洞
TinyFileManager is a web-based file manager. It is used for storing, uploading, editing and managing files and folders online via a web browser. A security vulnerability exists in TinyFileManager version v2.4.7, which stems from a stored cross-site scripting vulnerability that could lead to the...
CVE-2022-1000
Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7...
Path traversal
Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7...