6 matches found
EUVD-2026-45991
An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component...
CVE-2026-51027
CVE-2026-51027 affects FileThingie v2.5.7, where the ft2.php component allows a remote attacker to obtain sensitive information. The issue is documented in multiple sources (NVD/CVE records) with a high impact and CVSS v3.1 score of 9.9 (NETWORK attack, low complexity, no user interaction, scope ...
CVE-2019-25471
FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint. Attackers can upload ZIP files containing PHP shells, use the unzip functionality to extract them into accessible directories, an...
CVE-2019-25471
CVE-2019-25471 affects FileThingie 2.5.7. An arbitrary file upload vulnerability exists where ZIP archives sent to ft2.php can be unpacked to accessible directories, enabling upload and deployment of PHP shells and execution of arbitrary commands via extracted files. The underlying issue is an in...
CVE-2019-25471 FileThingie 2.5.7 Arbitrary File Upload via ft2.php
FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint. Attackers can upload ZIP files containing PHP shells, use the unzip functionality to extract them into accessible directories, an...
CVE-2019-25471 FileThingie 2.5.7 Arbitrary File Upload via ft2.php
FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint. Attackers can upload ZIP files containing PHP shells, use the unzip functionality to extract them into accessible directories, an...