tinyfilemanager
tinyfilemanager copied to clipboard
tinyfilemanager.php contain malware
how to fix tinyfilemanager.php file contain malware so i can't upload file or the file is deleted?
There's references to this here and there and it's a vulnerability for code injection, not an issue of malware contained within Tiny File Manager.
As best I can tell is that the vulnerability has been fixed as well.
Whatever scan/check is being referenced elsewhere here is ambiguous otherwise.
Can this be confirmed and this issue marked appropriately?
The ambiguous reference I'm citing is #578 ('SiteLock' - appears to be some for pay service, a not openly accessible FUD inducing bait)
I used https://www.virustotal.com/ to check the file and it also showing malware detection: VUL.Webshell
cpanel wont let me upload the file because it says it has malware Bkav Pro - VUL.Webshell
Solution for cPanel:
Open tinyfilemanager.php in a text editor And
Replace All:
fm_redirect(FM_SELF_URL . '?p=' . urlencode(FM_PATH));
With:
$FM_PATH=FM_PATH; fm_redirect(FM_SELF_URL . '?p=' . urlencode($FM_PATH));