What’s Vulnerable › Vulnerabilities
CVE-2019-7174
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-04-09 · updated 2026-06-17
Description
Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Echo File List), and movefile.php (aka Move File) operations.
Affected products
- Roxyfileman Roxy Fileman: 1.4.5
References
Get alerted when CVE-2019-7174 or the next vulnerability affects your stack