Unrated

A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with...

CVE-2021-45010 First seen on SecPulse Mar 15, 2022

Original description The description as published by the source.

A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execution.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch febin0x4e4a.wordpress.com
patch github.com
patch github.com
patch github.com
report packetstormsecurity.com
report github.com
report raw.githubusercontent.com
report sploitus.com

Key facts

Severity: Unrated
Published: Mar 15, 2022
First seen on SecPulse: Mar 15, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:55