https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 10:43:22 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-80270 cnvd-2021-80270 https://cve.radiocsirt.org/vuln/cnvd-2021-80270 https://cve.radiocsirt.org/vuln/euvd-2026-31403 EUVD-2026-31403 https://cve.radiocsirt.org/vuln/euvd-2026-31403 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40964 <p>A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the &#34;fullpath&#34; parameter containing path traversal strings (../ and ..\) in order to escape the server&#39;s intended working directory and write malicious files onto any directory on the computer.</p> <p>A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the &#34;fullpath&#34; parameter containing path traversal strings (../ and ..\) in order to escape the server&#39;s intended working directory and write malicious files onto any directory on the computer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-40964 https://cve.radiocsirt.org/vuln/ghsa-fw9q-rwpp-xcw5 <p>A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the &#34;fullpath&#34; parameter containing path traversal strings (../ and ..\) in order to escape the server&#39;s intended working directory and write malicious files onto any directory on the computer.</p> <p>A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the &#34;fullpath&#34; parameter containing path traversal strings (../ and ..\) in order to escape the server&#39;s intended working directory and write malicious files onto any directory on the computer.</p> https://cve.radiocsirt.org/vuln/ghsa-fw9q-rwpp-xcw5 https://cve.radiocsirt.org/vuln/gsd-2021-40964 gsd-2021-40964 https://cve.radiocsirt.org/vuln/gsd-2021-40964