CVE-2020-12103

State: Published
Severity: Not scored
Published: Apr 28, 2020
Updated: Aug 4, 2024
Reserved: Apr 23, 2020

Description

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak extension) outside the scope in the same directory in which they are stored.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/prasathmani/tinyfilemanager/commit/a0c595a8e11e55a43eeaa68e1a3ce76365f29d06
https://github.com/prasathmani/tinyfilemanager/issues/357
https://cyberaz0r.info/2020/04/tiny-file-manager-multiple-vulnerabilities/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.