117 matches found
CVE-2021-40964
Tiny File Manager = 2.4.6 - Ejecución Remota de Código Autenticado 🚨 Acerca del Exploit Este es un exploit de Ejecución Remota de Código RCE autenticado basado en Bash para Tiny File Manager versiones = 2.4.6, vulnerable bajo CVE-2021-40964. El script aprovecha: Validación débil de carga y...
tinyfilemanager-wh1z-edition
Tiny File Manager WH1Z-Edition Te presentamos Tiny File Manager WH1Z-Edition, la solución compacta y eficiente para gestionar tus archivos y carpetas con funciones mejoradas de privacidad y seguridad. Se acabaron los días de depender de recursos externos: he reducido el código a su núcleo,...
CVE-2021-45010
CVE-2021-45010 Título del Exploit: Tiny File Manager 2.4.6 Autenticado Ejecución Remota de Código Fecha: 04 Mar 2023 Autor del Exploit: Syd Software Enlace: https://github.com/prasathmani/tinyfilemanager Versión: Tiny File Manager = 2.4.3 Probado en: Parrot OS 20.04 CVE : CVE-2021-45010 Referenci...
CVE-2021-45010-TinyFileManager-Exploit
CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project’s Tiny File Manager = 2.4.3 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve code execution o...
tinyfilemanager-2.4.3-exploit
CVE-2021-45010 Exploit de Tiny File Manager-2.4.3 Una vulnerabilidad de path traversal en la funcionalidad de carga de archivos en tinyfilemanager.php del Tiny File Manager del proyecto Tiny File Manager = 2.4.6 permite a atacantes remotos con cuentas de usuario válidas cargar archivos PHP...
CVE-2021-45010
CVE-2021-45010 🐍 Exploit PoC en Python creado para CVE-2021-45010. Tiny File Manager 2.4.7 Uso root@kitploit: usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME...
CVE-2026-6496
A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...
PT-2026-33459
Name of the Vulnerable Software and Affected Versions Prasathmani TinyFileManager versions prior to 2.7 Description A path traversal issue exists in the POST Parameter Handler component within the '/filemanager.php' file. Remote attackers can manipulate the file argument to access files and...
CVE-2025-46651
Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...
CVE-2025-46651
Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...
CVE-2025-46651
Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...
PT-2026-5900
Name of the Vulnerable Software and Affected Versions Tiny File Manager versions through 2.6 Description The software contains a server-side request forgery SSRF issue in the URL upload feature. Insufficient validation of user-supplied URLs allows an attacker to send crafted requests to localhost...
CVE-2025-46651
CVE-2025-46651 affects Tiny File Manager up to version 2.6, where a server-side request forgery (SSRF) exists in the URL upload feature due to insufficient validation of user-supplied URLs. An attacker can craft requests to localhost (e.g., via domains like http://www.127.0.0.1.example.com/), pot...
CVE-2025-46651
Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...
CVE-2025-46651
Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...
CVE-2025-46651
Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...
Tiny File Manager 安全漏洞
Tiny File Manager is a web-based open-source file manager developed by Prasath Mani. Versions of Tiny File Manager 2.6 and earlier had security vulnerabilities. These vulnerabilities stemmed from insufficient URL validation in the URL upload function, which could lead to server-side request...
CVE-2022-23044
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF...
CVE-2020-12103
In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files with .bak extension outside the scope in the same directory in which they are stored...
CVE-2020-12102
In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the filesystem outside of the application scope...