critical9.8Public exploit code
CVE-2018-20526
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal2019-01-07 · webapps · php
Impact
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Roxyfileman | Roxy Fileman | Version 1.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html
- https://www.exploit-db.com/exploits/46085/
- http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html
- https://www.exploit-db.com/exploits/46085/