PT-2019-18454

Name of the Vulnerable Software and Affected Versions Roxy Fileman version 1.4.5 Description The issue allows attackers to execute certain operations, including renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File...

CVE-2019-7174: Undefined Security Weakness

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File operations...

CVE-2002-1087: Undefined Security Weakness

The scripts 1 createdir.php, 2 removedir.php and 3 uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request...