| Package | Affected versions | Patched versions |
|---|---|---|
| tiny file manager | ≤ 2.4.6 |
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the "fullpath" parameter containing path traversal strings (../ and ..\) in order to escape the server's intended working directory and write malicious files onto any directory on the computer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free