CVE-2018-20525: Path Traversal
Published Mar 18, 2019
·Updated
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
Affected Software
1 affected component
Roxyfileman Roxy Fileman=1.4.5
Event History
Mar 18, 2019
CVE Published
via MITRE·03:21 PM
Data Sourced
via MITRE·03:21 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20525?
CVE-2018-20525 has a medium severity rating due to its potential for unauthorized file access and manipulation.
2
How does CVE-2018-20525 affect Roxy Fileman 1.4.5?
CVE-2018-20525 allows attackers to exploit directory traversal vulnerabilities in Roxy Fileman 1.4.5 via specific PHP scripts.
3
How do I fix CVE-2018-20525?
To fix CVE-2018-20525, update Roxy Fileman to the latest version that addresses this vulnerability.
4
What components are impacted by CVE-2018-20525?
CVE-2018-20525 affects the copydir.php, copyfile.php, and fileslist.php components of Roxy Fileman 1.4.5.
5
Can CVE-2018-20525 lead to remote code execution?
Yes, CVE-2018-20525 can lead to remote code execution if exploited, allowing unauthorized actions on the server.