Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-46000
6.5
MEDIUMCVSS v3
Published
July 18, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.
simogeo/Filemanager
GitHubAn open-source file manager released under MIT license. Up-to-date for PHP connector. This package is DEPRECATED. Now, please use RichFileManager available at : https://github.com/servocoder/RichFilemanager.
GitHubAn open-source file manager released under MIT license. Up-to-date for PHP connector. This package is DEPRECATED. Now, please use RichFileManager available at : https://github.com/servocoder/RichFilemanager.<= 2.5.0NVD