PT-2019-18454

Name of the Vulnerable Software and Affected Versions Roxy Fileman version 1.4.5 Description The issue allows attackers to execute certain operations, including renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File...

CVE-2019-7174: Undefined Security Weakness

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File operations...

CVE-2018-20525

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php...

CVE-2018-20525

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php...

CVE-2018-20526

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php...

CVE-2018-20526

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php...

Directory traversal

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php...

Unrestricted file upload

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php...

CVE-2018-20526

The Roxy Fileman open-source file browser version 1.4.5 is vulnerable to unrestricted file upload via the upload.php file. An attacker can exploit this flaw to upload shell code or other malicious files to the server without authentication. Successful exploitation may lead to remote code executio...

CVE-2018-20526

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php...

CVE-2018-20525

CVE-2018-20525 affects Roxy Fileman 1.4.5, enabling directory traversal via copydir.php, copyfile.php, and fileslist.php. Public write-up and exploit references (e.g., Exploit-DB, PacketStorm) describe or imply abuse for arbitrary directory access via directory traversal and related upload bypass...

CVE-2018-20525

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php...

PT-2019-10104

Name of the Vulnerable Software and Affected Versions: Roxy Fileman version 1.4.5 Description: The issue allows for unrestricted file upload in the upload.php file. Recommendations: For version 1.4.5, restrict access to the upload.php file to prevent unauthorized file uploads until a fix is...

CVE-2018-20526: Unrestricted Upload of File with Dangerous Type

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php...

CVE-2018-20525: Improper Limitation of a Pathname to a Restricted Directory

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php...

PT-2019-10103

Name of the Vulnerable Software and Affected Versions: Roxy Fileman version 1.4.5 Description: The issue allows Directory Traversal in certain PHP files, specifically copydir.php, copyfile.php, and fileslist.php. Recommendations: For Roxy Fileman version 1.4.5, consider restricting access to the...

Roxy Fileman 1.4.5 - Arbitrary File Download

Roxy Fileman 1.4.5 - Arbitrary File Download Exploit Title: Roxy Fileman 1.4.5 - Arbitrary File Download Dork: N/A Date: 2019-01-16 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.roxyfileman.com/ Software Link: http://www.roxyfileman.com/download.php?f=1.4.5-php Version: 1.4.5 Category:...

Roxy Fileman 1.4.5 Arbitrary File Download

Exploit Title: Roxy Fileman 1.4.5 - Arbitrary File Download Dork: N/A Date: 2019-01-16 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.roxyfileman.com/ Software Link: http://www.roxyfileman.com/download.php?f=1.4.5-php Version: 1.4.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Roxy Fileman 1.4.5 - Arbitrary File Download

Exploit Title: Roxy Fileman 1.4.5 - Arbitrary File Download Dork: N/A Date: 2019-01-16 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.roxyfileman.com/ Software Link: http://www.roxyfileman.com/download.php?f=1.4.5-php Version: 1.4.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Roxy Fileman Path Traversal Vulnerability

Roxy Fileman is a set of open source file browser for . A path traversal vulnerability exists in the copydir.php file, copyfile.php file, and fileslist.php file in Roxy Fileman version 1.4.5. No details of the vulnerabilities are provided at this time...