critical9.1Public exploit code
CVE-2018-20525
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal2019-01-07 · webapps · php
Impact
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Roxyfileman | Roxy Fileman | Version 1.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html
- http://packetstormsecurity.com/files/166585/Roxy-File-Manager-1.4.5-PHP-File-Upload-Restriction-Bypass.html
- https://www.exploit-db.com/exploits/46085/
- http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html
- http://packetstormsecurity.com/files/166585/Roxy-File-Manager-1.4.5-PHP-File-Upload-Restriction-Bypass.html
- https://www.exploit-db.com/exploits/46085/