PR
Vendor
Prasathmani
21
CVEs
0
On KEV
2
New 30D
Products
TI7.2
TinyFileManager
prasathmani
5 CVEs0 on KEV2 new
TF9.8
Tiny File Manager
Prasathmani
16 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116044 New | TI TinyFileManager prasathmani | 6.3 | Oct 25 | prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload |
| CVE-2026-108801 | TI TinyFileManager prasathmani | 6.3 | Oct 12 | prasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted upload |
| CVE-2026-6497 | TI TinyFileManager prasathmani | 6.3 | Apr 17 | prasathmani TinyFileManager File Upload filemanager.php server-side request forgery |
| CVE-2026-6496 | TI TinyFileManager prasathmani | 5.4 | Apr 17 | prasathmani TinyFileManager POST Parameter filemanager.php path traversal |
| CVE-2025-46651 | TF Tiny File Manager Prasathmani | 4.3 | Feb 3 | Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature |
| CVE-2025-15138 | TI TinyFileManager prasathmani | 7.2 | Dec 28 | prasathmani TinyFileManager tinyfilemanager.php path traversal |
| CVE-2025-44998 | TF Tiny File Manager Prasathmani | 6.1 | May 23 | A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via… |
| CVE-2022-40490 | TF Tiny File Manager Prasathmani | 4.8 | Feb 6 | Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability |
| CVE-2022-40916 | TF Tiny File Manager Prasathmani | 9.8 | Feb 6 | Tiny File Manager v2.4.7 and below is vulnerable to session fixation |
| CVE-2022-45476 | TF Tiny File Manager Prasathmani | 9.8 | Nov 25 | Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download |
| CVE-2022-45475 | TF Tiny File Manager Prasathmani | 6.5 | Nov 25 | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files |
| CVE-2022-23044 | TF Tiny File Manager Prasathmani | 8.8 | Nov 25 | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the application |
| CVE-2022-1000 | TF Tiny File Manager Prasathmani | 9.8 | Mar 17 | Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7 |
| CVE-2021-45010 | TF Tiny File Manager Prasathmani | 8.8 | Mar 15 | A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to… |
| CVE-2021-40966 | TF Tiny File Manager Prasathmani | 5.4 | Sep 15 | A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name |
| CVE-2021-40965 | TF Tiny File Manager Prasathmani | 8.8 | Sep 15 | A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by… |
| CVE-2021-40964 | TF Tiny File Manager Prasathmani | 6.5 | Sep 15 | A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF… |
| CVE-2020-12103 | TF Tiny File Manager Prasathmani | 7.7 | Apr 28 | In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak… |
| CVE-2020-12102 | TF Tiny File Manager Prasathmani | 7.7 | Apr 28 | In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality |
| CVE-2019-16790 | TF Tiny File Manager Prasathmani | 8.8 | Dec 30 | In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files |