CVE-2018-20525: Roxyfileman Roxy Fileman

Critical severity, CVSS 9.1. EPSS: 21.6% chance of exploitation in the next 30 days.

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

Affected products

• Roxyfileman Roxy Fileman: version 1.4.5 only

Published 2019-03-21. Last modified 2026-06-17.