Tiny File Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:tiny_file_manager_project:tiny_file_manager:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tiny File Manager Project (2008fab7-b22e-5bad-88f5-ca62f74e4356) |
|---|---|
| Product | Tiny File Manager (9e6f22fa-c65f-5877-b35b-c4e9f90175b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/prasathmani/tinyfilemanager |
purl2cpe | 2026-06-01 10:16:03.414586 |
pkg:sourceforge/tinyphpfilemanager |
purl2cpe | 2026-06-01 10:16:03.414587 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-1000 |
vulnerable | 2026-06-08 05:39:11.640678 |
Path Traversal in prasathmani/tinyfilemanager
HIGH (8.8)
Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.
Published: 2022-03-17T10:30:14.000Z
Updated: 2024-08-02T23:47:42.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45010 |
vulnerable | 2026-06-08 05:36:47.684173 |
Details available
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execution.
Published: 2022-03-15T11:13:26.000Z
Updated: 2024-08-04T04:32:13.613Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16790 |
vulnerable | 2026-06-08 05:13:09.404809 |
Remote Code Execution in Tiny File Manager
MEDIUM (6.5)
In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only authenticated users are impacted.
Published: 2019-12-30T19:15:14.000Z
Updated: 2024-08-05T01:24:48.387Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.