CVE-2019-11611

DoorGets 7.0 is affected by a sensitive information disclosure in /fileman/php/download.php. A remote unauthenticated attacker can exploit this to obtain server‑sensitive information. The connected records corroborate the issue but do not provide the root cause details, affected versions beyond 7...

CVE-2019-11611: Improper Limitation of a Pathname to a Restricted Directory

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

PT-2019-12418

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/download.php endpoint to obtain server-sensitive information. Recommendations F...

CVE-2018-12042

Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...

Directory traversal

Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...

CVE-2018-12042: Improper Limitation of a Pathname to a Restricted Directory

Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...

PT-2018-10964

Name of the Vulnerable Software and Affected Versions Roxy Fileman versions prior to 1.4.6 Description The issue allows for directory traversal via the "f" parameter in the php/download.php endpoint. Recommendations For Roxy Fileman versions prior to 1.4.6, update to version 1.4.6 or later to...