Prasathmani Tiny File Manager 2.4.8

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:prasathmani:tiny_file_manager:2.4.8:*:*:*:*:*:*:*

part: a version: 2.4.8 update: *

VendorPrasathmani (c170288b-7149-5941-926f-39c017dd406f)
ProductTiny File Manager (61b9728f-f521-5b17-a193-e5d5bd87ed44)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/prasathmani/tinyfilemanager purl2cpe 2026-06-01 10:15:34.827880

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45476 vulnerable 2026-06-08 05:50:36.433829 Details available
Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download. This is possible because the application is vulnerable to insecure file upload.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-29T14:05:00.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45475 vulnerable 2026-06-08 05:50:36.433125 Details available
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. This is possible because the application is vulnerable to broken access control.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-29T14:07:53.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23044 vulnerable 2026-06-08 05:40:56.073777 Details available
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application. This is possible because the application is vulnerable to CSRF.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-25T17:33:39.212Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.