PT-2026-122952
CVE-2026-116044
·
Published
2026-10-25
·
Updated
2026-10-25
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
prasathmani TinyFileManager versions prior to 2.7
Description
An unrestricted upload issue exists within the Remote URL File Upload Module of the
tinyfilemanager.php file. This flaw allows a remote attacker to upload files without proper restrictions.Recommendations
Update to a version newer than 2.6.
As a temporary mitigation, restrict access to the Remote URL File Upload Module within
tinyfilemanager.php.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾