Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2019-16790

Remote Code Execution in Tiny File Manager

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only authenticated users are impacted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tiny File Manager Tiny File Manager

  • before 2.3.9affected

References