TI-2026-23576 CVE-2026-30580 · GHSA-293m-mfcv-f7g4
File Thingie 2.5.7 is vulnerable to Directory Traversal.
Priority LOW 23
File Thingie 2.5.7 is vulnerable to Directory Traversal.
Vulnerabilities
5 records
TI-2026-23575 CVE-2026-30579 · GHSA-gf2m-fvrm-3jx4
File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
Priority LOW 28
File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
TI-2026-23574 CVE-2026-30578 · GHSA-pqvq-hmh6-qwqj
File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
Priority LOW 28
File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
TI-2019-15524 CVE-2019-25471 · GHSA-6w2p-gpfw-mwh2
FileThingie 2.5.7 Arbitrary File Upload via ft2.php
Priority HIGH 81
FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint.
TI-2023-30225 CVE-2023-53942 · GHSA-4rrg-j6g5-6x9x
File Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Execution
Priority HIGH 76
File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious PHP zip archives to the web server.