Web Application Security

Tiny.File.Manager.tinyfilemanager.php.Directory.Traveral

Description

This indicates an attack attempt to exploit a Directory Traversal Vulnerability in Tiny File Manager.
The vulnerability is due to insufficient validation of the fullpath parameter during file upload operation. A remote, authenticated attacker could exploit the vulnerability by sending a crafted request to the server. Successful exploitation could result in directory traversal and arbitrary file write, which could lead to potential code execution under the security context of web server process on the target server.