Approved changes feed: RSS · Atom

cpe:2.3:a:filethingie:filethingie:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFilethingie (36e79299-7f0f-50d8-bd04-e3e153925830)
ProductFilethingie (c560cfd7-43d0-55a8-8d17-3e0f690c7101)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25471 vulnerable 2026-06-08 05:13:42.416825 FileThingie 2.5.7 Arbitrary File Upload via ft2.php
CRITICAL (9.8)
FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint. Attackers can upload ZIP files containing PHP shells, use the unzip functionality to extract them into accessible directories, and execute arbitrary commands through the extracted PHP files.
Published: 2026-03-11T18:23:14.701Z
Updated: 2026-04-07T14:04:29.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.