CVE-2018-20525
CRITICAL 9.1EPSS 21.6%
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
- CVSS v3.1
- 9.1 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS v2.0
- 6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N - EPSS
- 21.65% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2019-03-18
- Updated
- 2024-08-05
Proof-of-concept exploits (2)
- http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Trav…
- http://packetstormsecurity.com/files/166585/Roxy-File-Manager-1.4.5-PHP-File-Upload-Restr…