CVE-2021-40964

Tiny File Manager = 2.4.6 - 远程代码执行（需认证） 🚨 关于漏洞利用 这是一个基于 Bash 的需认证 远程代码执行 RCE 漏洞利用工具，针对 Tiny File Manager 版本 = 2.4.6，受 CVE-2021-40964 影响。 该脚本利用： 弱上传验证与 webroot 泄露， 任意文件上传漏洞，进而实现 PHP 代码执行。 📌 详细信息 漏洞标题： Tiny File Manager = 2.4.6 - 远程代码执行 RCE CVE： CVE-2021-40964 作者： Z3R0 0x30 受影响版本： ≤ 2.4.6 是否需要认证：...

CVE-2021-45010

CVE-2021-45010 Título del Exploit: Tiny File Manager 2.4.6 Autenticado Ejecución Remota de Código Fecha: 04 Mar 2023 Autor del Exploit: Syd Software Enlace: https://github.com/prasathmani/tinyfilemanager Versión: Tiny File Manager = 2.4.3 Probado en: Parrot OS 20.04 CVE : CVE-2021-45010 Referenci...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition 隆重介绍 Tiny File Manager WH1Z-Edition，这是一款紧凑高效的文件和文件夹管理解决方案，具有增强的隐私和安全特性。告别依赖外部资源的日子，我已将代码精简至核心，使其真正轻量级，完美适用于无互联网访问或出站连接的环境。 Tiny File Manager WH1Z-Edition 以简洁和速度为核心设计理念，保留了您直接通过网页浏览器存储、上传、编辑和管理文件所需的所有基本功能。采用单一 PHP 文件设置，您可以轻松将其放入服务器上的任何文件夹，并立即开始整理文件。 Tiny File Manager...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: Una vulnerabilidad de path traversal en la funcionalidad de carga de archivos en tinyfilemanager.php del Proyecto Tiny File Manager, en Tiny File Manager = 2.4.3, permite a atacantes remotos con cuentas de usuario válidas cargar archivos PHP maliciosos en la raíz we...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Exploit de Tiny File Manager-2.4.3 Una vulnerabilidad de path traversal en la funcionalidad de carga de archivos en tinyfilemanager.php del Tiny File Manager del proyecto Tiny File Manager = 2.4.6 permite a atacantes remotos con cuentas de usuario válidas cargar archivos PHP...

CVE-2021-45010

CVE-2021-45010 🐍 为CVE-2021-45010设计的Python PoC漏洞利用。 Tiny File Manager 2.4.7 使用方法 usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME Username -p PASSWORD, --password...

CVE-2026-6496

A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...

PT-2026-33459

Name of the Vulnerable Software and Affected Versions Prasathmani TinyFileManager versions prior to 2.7 Description A path traversal issue exists in the POST Parameter Handler component within the '/filemanager.php' file. Remote attackers can manipulate the file argument to access files and...

CVE-2025-46651

Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...

CVE-2025-46651

Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...

PT-2026-5900

Name of the Vulnerable Software and Affected Versions Tiny File Manager versions through 2.6 Description The software contains a server-side request forgery SSRF issue in the URL upload feature. Insufficient validation of user-supplied URLs allows an attacker to send crafted requests to localhost...

CVE-2025-46651: Server-Side Request Forgery (SSRF)

Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...

CVE-2025-46651

Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...

CVE-2025-46651

Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...

CVE-2025-46651

Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...

CVE-2025-46651

Tiny File Manager through 2.6 contains a server-side request forgery SSRF vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0.0.1.example.com/ or a similarly constructed domain...

CVE-2025-46651

Tiny File Manager versions through 2.6 are vulnerable to a server-side request forgery (SSRF) vulnerability within the URL upload feature . The root cause is insufficient validation of user-supplied URLs, which allows an attacker to bypass restrictions and send crafted requests to localhost using...

Tiny File Manager 安全漏洞

Tiny File Manager is a web-based open-source file manager developed by Prasath Mani. Versions of Tiny File Manager 2.6 and earlier had security vulnerabilities. These vulnerabilities stemmed from insufficient URL validation in the URL upload function, which could lead to server-side request...

CVE-2022-23044

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF...

CVE-2020-12103

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files with .bak extension outside the scope in the same directory in which they are stored...