CVEDB API

Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.3%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-12042

Roxyfileman » Roxy Fileman » Version: 1.0

cpe:2.3:a:roxyfileman:roxy_fileman:1.0
Roxyfileman » Roxy Fileman » Version: 1.1

cpe:2.3:a:roxyfileman:roxy_fileman:1.1
Roxyfileman » Roxy Fileman » Version: 1.2

cpe:2.3:a:roxyfileman:roxy_fileman:1.2
Roxyfileman » Roxy Fileman » Version: 1.2.6

cpe:2.3:a:roxyfileman:roxy_fileman:1.2.6
Roxyfileman » Roxy Fileman » Version: 1.3

cpe:2.3:a:roxyfileman:roxy_fileman:1.3
Roxyfileman » Roxy Fileman » Version: 1.3.1

cpe:2.3:a:roxyfileman:roxy_fileman:1.3.1
Roxyfileman » Roxy Fileman » Version: 1.4.0

cpe:2.3:a:roxyfileman:roxy_fileman:1.4.0
Roxyfileman » Roxy Fileman » Version: 1.4.1

cpe:2.3:a:roxyfileman:roxy_fileman:1.4.1
Roxyfileman » Roxy Fileman » Version: 1.4.2

cpe:2.3:a:roxyfileman:roxy_fileman:1.4.2
Roxyfileman » Roxy Fileman » Version: 1.4.3

cpe:2.3:a:roxyfileman:roxy_fileman:1.4.3
Roxyfileman » Roxy Fileman » Version: 1.4.4

cpe:2.3:a:roxyfileman:roxy_fileman:1.4.4
Roxyfileman » Roxy Fileman » Version: 1.4.5

cpe:2.3:a:roxyfileman:roxy_fileman:1.4.5