CVE-2017-8297: Simple-File-Manager Project Simple-File-Manager

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole "Simple PHP File Manager" component).

Affected products

• Simple-File-Manager Project Simple-File-Manager: up to and including 2017-04-19

Published 2017-04-27. Last modified 2026-06-17.