cve/2018/CVE-2018-20526.md

CVE-2018-20526

Description

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

POC

Reference

• http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html
• http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html
• https://www.exploit-db.com/exploits/46085/
• https://www.exploit-db.com/exploits/46085/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates