CVE-2025-46001

The simogeo/filemanager (specifically version v2.3.0 ) is vulnerable to an arbitrary file upload vulnerability within the is_allowed_file_type() function. Due to insufficient checks and improper file type validation, an attacker can upload a specially crafted PHP file to achieve remote code execu...

CVE-2025-46000

The simogeo/filemanager open-source package (specifically commit c75b914 v.2.5.0 ) contains an arbitrary file upload vulnerability in the /rsc/filemanager.rsc.class.php component. Attackers can bypass restrictions defined in filemanager.config.json by uploading a crafted SVG file , leading to arb...

CVE-2025-46000

An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-46001

An arbitrary file upload vulnerability in the isallowedfiletype function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-46002

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint...

CVE-2025-46001

An arbitrary file upload vulnerability in the isallowedfiletype function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

PT-2025-30041 · Unknown · File Manager

Name of the Vulnerable Software and Affected Versions: Filemanager version 2.3.0 Description: An arbitrary file upload vulnerability exists in the is allowed file type function. This allows attackers to execute arbitrary code by uploading a crafted PHP file. Recommendations: Filemanager version...

CVE-2025-46001

An arbitrary file upload vulnerability in the isallowedfiletype function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

FileManager security vulnerabilities

FileManager is a file manager in Backpack for Laravel open source. A security vulnerability exists in Filemanager version c75b914 v.2.5.0, which stems from improper file upload functionality and could lead to the execution of arbitrary code...

FileManager security vulnerabilities

FileManager is a file manager in Backpack for Laravel open source. A security vulnerability exists in Filemanager v2.5.0 and earlier versions, which stems from improper directory traversal functionality that could lead to unauthorized access...

CVE-2025-46000

An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-46002

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint...

CVE-2025-46001: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the isallowedfiletype function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-46002: Relative Path Traversal

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint...

PT-2025-30045

Name of the Vulnerable Software and Affected Versions Filemanager version 2.5.0 Description An arbitrary file upload vulnerability exists in the /rsc/filemanager.rsc.class.php component. Attackers can execute arbitrary code by uploading a crafted SVG file. Recommendations Filemanager version 2.5....

PT-2025-30042

Name of the Vulnerable Software and Affected Versions Filemanager versions 2.5.0 and below Description An issue allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint. Recommendations Filemanager versions prior to 2.5.0: At the moment,...

CVE-2025-46000: Improper Control of Generation of Code

An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-46001

An arbitrary file upload vulnerability in the isallowedfiletype function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-5345 Exposed AIDL service allowing to read and delete files with system-level privileges in Bluebird filemanager application

Bluebird devices contain a pre-loaded file manager application. This application exposes an unsecured service provider "com.bluebird.system.koreanpost.IsdcardRemoteService". A local attacker can bind to the AIDL-type service to copy and delete arbitrary files from device's storage with system-lev...

CVE-2025-5345

Bluebird devices are affected by CVE-2025-5345 in a pre-loaded file manager app. The vulnerability resides in an unsecured AIDL service, com.bluebird.system.koreanpost.IsdcardRemoteService, which allows a local attacker to bind to the service and copy or delete arbitrary files from device storage...