roxyfileman kayıtları
roxyfileman üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
61Bu hafta | CVE-2018-20526Kavram kanıtı | Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.roxyfileman · roxy fileman · CWE-434 | Kritik9,8 | — | %73,1 | 21 Mar 2019 |
42Planlayın | CVE-2018-20525Kavram kanıtı | Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.roxyfileman · roxy fileman · CWE-22 | Kritik9,1 | — | %21,6 | 21 Mar 2019 |
40Planlayın | CVE-2022-40797İstismar yok | Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .phroxyfileman · roxy fileman · CWE-434 | Kritik9,8 | — | %2,9 | 9 Kas 2022 |
39İzleyin | CVE-2019-7174İstismar yok | Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Ecroxyfileman · roxy fileman | Kritik9,8 | — | %1,7 | 9 Nis 2019 |
33İzleyin | CVE-2019-19731Kavram kanıtı | Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal.roxyfileman · roxy fileman · CWE-22 | Yüksek7,5 | — | %11,6 | 16 Ara 2019 |
31İzleyin | CVE-2018-12042İstismar yok | Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.roxyfileman · roxy fileman · CWE-22 | Yüksek7,5 | — | %1,8 | 7 Haz 2018 |
- CVE-2018-2052661Bu hafta
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
KritikCVSS 9,8Kavram kanıtıEPSS %73roxyfileman · roxy fileman21 Mar 2019
- CVE-2018-2052542Planlayın
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
KritikCVSS 9,1Kavram kanıtıEPSS %22roxyfileman · roxy fileman21 Mar 2019
- CVE-2022-4079740Planlayın
Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .ph
KritikCVSS 9,8İstismar yokEPSS %3roxyfileman · roxy fileman9 Kas 2022
- CVE-2019-717439İzleyin
Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Ec
KritikCVSS 9,8İstismar yokEPSS %2roxyfileman · roxy fileman9 Nis 2019
- CVE-2019-1973133İzleyin
Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal.
YüksekCVSS 7,5Kavram kanıtıEPSS %12roxyfileman · roxy fileman16 Ara 2019
- CVE-2018-1204231İzleyin
Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.
YüksekCVSS 7,5İstismar yokEPSS %2roxyfileman · roxy fileman7 Haz 2018