Description
Tiny File Manager中存在目录遍历漏洞，该漏洞是由于在文件上传操作期间对fullpath参数验证不足造成的。
Tiny File Manager CVE-2021-45010目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-45010
https://www.cve.org/CVERecord?id=CVE-2021-45010
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:DIR:TINY-FLEMNGR-FLPTH-TRV.html
https://www.exploit-db.com/exploits/50828
https://febin0x4e4a.wordpress.com/2022/01/23/tiny-file-manager-authenticated-rce/
https://hacklido.com/blog/92-tiny-file-manager-authenticated-rce-cve-2021-45010
https://github.com/febinrev/CVE-2021-45010-TinyFileManager-Exploit
https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2021-1734.html/
https://vuldb.com/vuln/195115
https://attackerkb.com/topics/GXqmiXuKhE/cve-2021-45010
https://cve.akaoma.com/cve-2021-45010
https://app.opencve.io/cve/?product=tiny_file_manager&vendor=prasathmani
https://vulners.com/cve/CVE-2021-45010
https://scanrepeat.com/vulnerability-database/tiny-file-manager-path-traversal
https://cvefeed.io/vuln/detail/CVE-2021-45010