CVE-2019-7174

9.8 criticalEPSS 1.7%

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Echo File List), and movefile.php (aka Move File) operations.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
Published: 2019-04-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

roxyfileman:roxy_fileman

References

https://alicangonullu.biz/konu/2
https://alicangonullu.biz/konu/2

Check your stack JSON