Login Request a demo
TF
Product
Tiny File Manager
by Prasathmani · last CVE Feb 3, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 3High 7Medium 6Low 0
Severity
All severities16Critical3High7Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tiny File Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-23044
8.8
0%
Nov 25
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application
Affected: 2.4.8
CVE-2021-45010
8.8
70%
Mar 15
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to…
Affected: through 2.4.7
CVE-2021-40965
8.8
1%
Sep 15
A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by…
Affected: through 2.4.6
CVE-2019-16790
8.8
1%
Dec 30
In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files
Affected: before 2.3.9
CVE-2020-12103
7.7
1%
Apr 28
In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak…
Affected: 2.4.1
CVE-2020-12102
7.7
2%
Apr 28
In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality
Affected: 2.4.1
CVE-2025-15138
7.2
1%
Dec 28
prasathmani TinyFileManager tinyfilemanager.php path traversal
Affected: through 2.6
Showing 7