TinyFileManager vulnerabilities
CVEs whose affected-version data names the TinyFileManager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-116044Medium· 6.3prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload
A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation le…
▾ Sunlitprasathmani · TinyFileManagerEPSS 0.21%via CVEORG
CVE-2026-108801Medium· 6.3PoCA security flaw has been discovered in prasathmani TinyFileManager up to 2.6
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestri…
▾ Twilightprasathmani · TinyFileManagerEPSS 0.33%via NVD