Gửi #787942: github.com/prasathmani tinyfilemanager 2.6 Path Traversalthông tin

tiêu đềgithub.com/prasathmani tinyfilemanager 2.6 Path Traversal
Mô tảA path traversal vulnerability in the mass delete handler allows an authenticated non-readonly user to delete arbitrary files outside the application's root directory by supplying traversal sequences in the file[] POST parameter, allow Delete any file readable by the web server process outside the managed directory
Nguồn⚠️ https://drive.google.com/file/d/14taA8w3e5z3gl4WttpB4_CquwQdz1i6r/view?usp=sharing
Người dùng
 0xNayel (UID 80926)
Đệ trình25/03/2026 07:08 (cách đây 6 các tháng)
Kiểm duyệt17/04/2026 10:39 (23 days later)
Trạng tháiđược chấp nhận
Mục VulDB358039 [prasathmani TinyFileManager đến 2.6 POST Parameter /filemanager.php file[] duyệt thư mục]
điểm19

Interested in the pricing of exploits?

See the underground prices here!