Non évaluée

A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with...

CVE-2021-45010 Première détection SecPulse Mar 15, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execution.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch febin0x4e4a.wordpress.com
patch github.com
patch github.com
patch github.com
report packetstormsecurity.com
report github.com
report raw.githubusercontent.com
report sploitus.com

Faits clés

Gravité: Non évaluée
Publication: Mar 15, 2022
Première détection SecPulse: Mar 15, 2022

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:55