← back
CVE-2018-20526observed exploitation

CVE-2018-20526

82Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 73%
from disclosure to weapon0 days
Published on NVDMar 18
1st PoCJan 7
VulnCheck+2262d
exploitation probability
73%top 1% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/46085unverifiedcve_referencepacketstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.htmlunverifiedcve_referencewww.exploit-db.com/exploits/46085/unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.htmlhttps://www.exploit-db.com/exploits/46085/