[GH-ISSUE #1221] EXPLOIT - DO NOT use on WINDOWS SERVER #781

New issue

Open

opened 2026-03-02 16:01:24 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 16:01:24 +03:00

Owner

Originally created by @id64350970 on GitHub (Aug 20, 2024).
Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/1221

There is an active exploit affecting Windows allowing to bypass restrictions and to view files, including .PHP with the passwords hashes. An advisory has been open but they do not seems interested to solve this problem quickly.

Originally created by @id64350970 on GitHub (Aug 20, 2024). Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/1221 There is an active exploit affecting **Windows** allowing to bypass restrictions and to view files, including _.PHP_ with the passwords hashes. An advisory has been open but they do not seems interested to solve this problem quickly.