Vulnerability: Arbitrary File Operations in Roxy Fileman 1.4.5

CVE-2019-7174 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Echo File List), and movefile.php (aka Move File) operations.

Learn more about our Web Application Penetration Testing UK.