| Название | github.com/prasathmani tinyfilemanager 2.6 Server-Side Request Forgery |
|---|
| Описание | A Server-Side Request Forgery vulnerability exists in the URL-based file upload feature of Tiny File Manager v2.6. An authenticated attacker can bypass the IP blocklist and force the server to make HTTP requests to internal resources, including localhost services and cloud metadata endpoints. |
|---|
| Источник | ⚠️ https://drive.google.com/file/d/1pB3dI4oUy09mAtDHWbLlcoRRC1b3YU6k/view?usp=sharing |
|---|
| Пользователь | 0xNayel (UID 80926) |
|---|
| Представление | 25.03.2026 07:09 (6 месяцы назад) |
|---|
| Модерация | 17.04.2026 10:39 (23 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 358040 [prasathmani TinyFileManager до 2.6 File Upload filemanager.php?p= ajax=true&type=upload uploadurl эскалация привилегий] |
|---|
| Баллы | 17 |
|---|