CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-45010

A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.642

EPSS Ranking 98.4%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2021-45010

Prasathmani » Tiny File Manager » Version: 2.0.1

cpe:2.3:a:prasathmani:tiny_file_manager:2.0.1
Prasathmani » Tiny File Manager » Version: 2.0.2

cpe:2.3:a:prasathmani:tiny_file_manager:2.0.2
Prasathmani » Tiny File Manager » Version: 2.2.0

cpe:2.3:a:prasathmani:tiny_file_manager:2.2.0
Prasathmani » Tiny File Manager » Version: 2.3

cpe:2.3:a:prasathmani:tiny_file_manager:2.3
Prasathmani » Tiny File Manager » Version: 2.3.4

cpe:2.3:a:prasathmani:tiny_file_manager:2.3.4
Prasathmani » Tiny File Manager » Version: 2.3.8

cpe:2.3:a:prasathmani:tiny_file_manager:2.3.8
Prasathmani » Tiny File Manager » Version: 2.3.9

cpe:2.3:a:prasathmani:tiny_file_manager:2.3.9
Prasathmani » Tiny File Manager » Version: 2.4.0

cpe:2.3:a:prasathmani:tiny_file_manager:2.4.0
Prasathmani » Tiny File Manager » Version: 2.4.1

cpe:2.3:a:prasathmani:tiny_file_manager:2.4.1
Prasathmani » Tiny File Manager » Version: 2.4.3

cpe:2.3:a:prasathmani:tiny_file_manager:2.4.3
Prasathmani » Tiny File Manager » Version: 2.4.6

cpe:2.3:a:prasathmani:tiny_file_manager:2.4.6
Prasathmani » Tiny File Manager » Version: 2.4.7

cpe:2.3:a:prasathmani:tiny_file_manager:2.4.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-45010

Products

Pricing

Contact Us