Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-45010
8.8
HIGHCVSS v3
Published
March 15, 2022
CVSS v2
6.5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execution.
prasathmani/tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager= *, <= 2.4.7NVD