prasathmani kayıtları
prasathmani üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
56Planlayın | CVE-2021-45010Kavram kanıtı | A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attacprasathmani · tiny file manager · CWE-22 | Yüksek8,8 | — | %70,0 | 15 Mar 2022 |
40Planlayın | CVE-2022-1000İstismar yok | Path Traversal in prasathmani/tinyfilemanagerprasathmani · tiny file manager · CWE-22 | Kritik9,8 | — | %1,8 | 17 Mar 2022 |
39İzleyin | CVE-2022-45476İstismar yok | Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for downloadprasathmani · tiny file manager · CWE-434 | Kritik9,8 | — | %1,0 | 25 Kas 2022 |
39İzleyin | CVE-2022-40916Kavram kanıtı | Tiny File Manager v2.4.7 and below is vulnerable to session fixation.prasathmani · tiny file manager · CWE-384 | Kritik9,8 | — | %0,8 | 6 Şub 2025 |
35İzleyin | CVE-2019-16790İstismar yok | Remote Code Execution in Tiny File Managerprasathmani · tiny file manager · CWE-78 | Yüksek8,8 | — | %1,2 | 30 Ara 2019 |
35İzleyin | CVE-2021-40965İstismar yok | A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to uprasathmani · tiny file manager · CWE-352 | Yüksek8,8 | — | %0,5 | 15 Eyl 2021 |
35İzleyin | CVE-2022-23044İstismar yok | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the applicaprasathmani · tiny file manager · CWE-352 | Yüksek8,8 | — | %0,4 | 25 Kas 2022 |
31İzleyin | CVE-2020-12102İstismar yok | In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality.prasathmani · tiny file manager · CWE-22 | Yüksek7,7 | — | %1,8 | 28 Nis 2020 |
30İzleyin | CVE-2020-12103İstismar yok | In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create baprasathmani · tiny file manager · CWE-22 | Yüksek7,7 | — | %1,4 | 28 Nis 2020 |
28İzleyin | CVE-2021-40964Kavram kanıtı | A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with prasathmani · tiny file manager · CWE-22 | Orta6,5 | — | %8,2 | 15 Eyl 2021 |
26İzleyin | CVE-2022-45475İstismar yok | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files.prasathmani · tiny file manager · CWE-284 | Orta6,5 | — | %0,9 | 25 Kas 2022 |
24İzleyin | CVE-2025-44998İstismar yok | A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to executprasathmani · tiny file manager · CWE-79 | Orta6,1 | — | %0,2 | 23 May 2025 |
21İzleyin | CVE-2021-40966İstismar yok | A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that coprasathmani · tiny file manager · CWE-79 | Orta5,4 | — | %0,5 | 15 Eyl 2021 |
19İzleyin | CVE-2022-40490Kavram kanıtı | Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability.prasathmani · tiny file manager · CWE-79 | Orta4,8 | — | %0,3 | 6 Şub 2025 |
17İzleyin | CVE-2025-46651İstismar yok | Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature.prasathmani · tiny file manager · CWE-918 | Orta4,3 | — | %0,2 | 3 Şub 2026 |
8İzleyin | CVE-2025-15138İstismar yok | prasathmani TinyFileManager tinyfilemanager.php path traversalprasathmani · tiny file manager · CWE-22 | Düşük2,0 | — | %0,6 | 28 Ara 2025 |
- CVE-2021-4501056Planlayın
A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attac
YüksekCVSS 8,8Kavram kanıtıEPSS %70prasathmani · tiny file manager15 Mar 2022
- CVE-2022-100040Planlayın
Path Traversal in prasathmani/tinyfilemanager
KritikCVSS 9,8İstismar yokEPSS %1prasathmani · tiny file manager17 Mar 2022
- CVE-2022-4547639İzleyin
Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download
KritikCVSS 9,8İstismar yokEPSS %1prasathmani · tiny file manager25 Kas 2022
- CVE-2022-4091639İzleyin
Tiny File Manager v2.4.7 and below is vulnerable to session fixation.
KritikCVSS 9,8Kavram kanıtıEPSS %0prasathmani · tiny file manager6 Şub 2025
- CVE-2019-1679035İzleyin
Remote Code Execution in Tiny File Manager
YüksekCVSS 8,8İstismar yokEPSS %1prasathmani · tiny file manager30 Ara 2019
- CVE-2021-4096535İzleyin
A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to u
YüksekCVSS 8,8İstismar yokEPSS %0prasathmani · tiny file manager15 Eyl 2021
- CVE-2022-2304435İzleyin
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended actions within the applica
YüksekCVSS 8,8İstismar yokEPSS %0prasathmani · tiny file manager25 Kas 2022
- CVE-2020-1210231İzleyin
In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality.
YüksekCVSS 7,7İstismar yokEPSS %1prasathmani · tiny file manager28 Nis 2020
- CVE-2020-1210330İzleyin
In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create ba
YüksekCVSS 7,7İstismar yokEPSS %1prasathmani · tiny file manager28 Nis 2020
- CVE-2021-4096428İzleyin
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with
OrtaCVSS 6,5Kavram kanıtıEPSS %8prasathmani · tiny file manager15 Eyl 2021
- CVE-2022-4547526İzleyin
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files.
OrtaCVSS 6,5İstismar yokEPSS %0prasathmani · tiny file manager25 Kas 2022
- CVE-2025-4499824İzleyin
A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execut
OrtaCVSS 6,1İstismar yokEPSS %0prasathmani · tiny file manager23 May 2025
- CVE-2021-4096621İzleyin
A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that co
OrtaCVSS 5,4İstismar yokEPSS %0prasathmani · tiny file manager15 Eyl 2021
- CVE-2022-4049019İzleyin
Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability.
OrtaCVSS 4,8Kavram kanıtıEPSS %0prasathmani · tiny file manager6 Şub 2025
- CVE-2025-4665117İzleyin
Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature.
OrtaCVSS 4,3İstismar yokEPSS %0prasathmani · tiny file manager3 Şub 2026
- CVE-2025-151388İzleyin
prasathmani TinyFileManager tinyfilemanager.php path traversal
DüşükCVSS 2,0İstismar yokEPSS %0prasathmani · tiny file manager28 Ara 2025