PRODUCT PROFILE

roxy_fileman

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2018-205262019/03/21

Roxy Fileman 1.4.5 - Unrestricted File Upload

Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.

roxy_filemanPoC 已收录

CVSS9.8EPSS 83.4%

高危2016/06/16

Roxy Fileman 1.4.4 - Arbitrary File Upload

Roxy Fileman 1.4.4 is susceptible to remote code execution via the FORBIDDEN_UPLOADS setting, which is checked when renaming an existing file to a new file extension. An attacker can bypass this check and rename already uploaded files to any extension using the move function, which does not perform any checks.

roxy_filemanPoC 已收录RCE

CVSS8.8