CVE-2018-20526
CRITICAL EXPLOITED NUCLEIRoxy Fileman 1.4.5 - Unrestricted File Upload via upload.php
Title source: llmExploitation Summary
CVE-2018-20526 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Pongtorn Angsuchotmetee_ Vittawat Masaree. A Nuclei detection template is also available.
AI-analyzed exploit summary The exploit demonstrates path traversal and unrestricted file upload vulnerabilities in Roxy Fileman 1.4.5. Path traversal allows accessing arbitrary files via manipulated variables in copydir.php, copyfile.php, and fileslist.php. Unrestricted file upload enables uploading malicious files with double extensions (e.g., shellcode.php.png) if php.ini is configured with AddHandler php7-script .php.
Description
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
Exploits (1)
The exploit demonstrates path traversal and unrestricted file upload vulnerabilities in Roxy Fileman 1.4.5. Path traversal allows accessing arbitrary files via manipulated variables in copydir.php, copyfile.php, and fileslist.php. Unrestricted file upload enables uploading malicious files with double extensions (e.g., shellcode.php.png) if php.ini is configured with AddHandler php7-script .php.
Nuclei Templates (1)
http.title:"roxy file manager"
title="roxy file manager"
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H