Tiny File Manager Project Tiny File Manager 2.4.8
Approved changes feed: RSS · Atom
cpe:2.3:a:tiny_file_manager_project:tiny_file_manager:2.4.8:*:*:*:*:*:*:*part: a version: 2.4.8 update: *
| Vendor | Tiny File Manager Project (2008fab7-b22e-5bad-88f5-ca62f74e4356) |
|---|---|
| Product | Tiny File Manager (9e6f22fa-c65f-5877-b35b-c4e9f90175b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/prasathmani/tinyfilemanager |
purl2cpe | 2026-06-01 10:16:03.414619 |
pkg:sourceforge/tinyphpfilemanager |
purl2cpe | 2026-06-01 10:16:03.414621 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-45476 |
vulnerable | 2026-06-08 05:50:36.433802 |
Details available
Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download. This is possible because the application is vulnerable to insecure file upload.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-29T14:05:00.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45475 |
vulnerable | 2026-06-08 05:50:36.431917 |
Details available
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-29T14:07:53.180Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23044 |
vulnerable | 2026-06-08 05:40:56.072910 |
Details available
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-25T17:33:39.212Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.