File and Path Handling

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Roxy Fileman 1.4.5 - Unrestricted File UploadCVE-2018-20526Roxyfileman · 73% likely

   CWE-434

2. Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.CVE-2018-20525Roxyfileman · 22% likely

   CWE-22

3. Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This can be leveraged for…CVE-2019-19731Roxyfileman · 12% likely

   CWE-22

4. Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .php, .php4, and .php5 files. (Visiting an…CVE-2022-40797Roxyfileman · CVSS 9.8 · 4.1% likely

   CWE-434

5. Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.CVE-2018-12042Roxyfileman · 1.8% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.