PT-2019-10104 · Kcfinder · Roxy Fileman

CVE-2018-20526

Published

2019-03-18

Updated

2019-03-22

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Roxy Fileman version 1.4.5

Description: The issue allows for unrestricted file upload in the upload.php file.

Recommendations: For version 1.4.5, restrict access to the upload.php file to prevent unauthorized file uploads until a fix is available.

Exploit

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2018-20526

Roxy Fileman