CVE-2022-40490 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrar…
Medium CVSS: 4.8

CVE-2022-40490

Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.
Vendor
Prasathmani
Product
Tiny File Manager
CWE
CWE-79
Yayın Tarihi
2025-02-06 17:15:13
Güncelleme
2025-12-31 19:40:50
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Tiny File Manager MEDIUM Prasathmani 2025

Referanslar

https://github.com/prasathmani/tinyfilemanager https://github.com/whitej3rry/CVE-2022-40490/blob/main/PoC.md https://github.com/whitej3rry/CVE-2022-40490/blob/main/PoC.md