References https://www.exploit-db.com/exploits/51355 https://www.exploit-db.com/exploits/39963 https://www.exploit-db.com/exploits/46085 https://nvd.nist.gov/vuln/detail/CVE-2018-20526 https://pentest-tools.com/vulnerabilities-exploits/roxy-fileman-145-unrestricted-file-upload_3044 https://github.com/advisories/GHSA-jf88-mw32-x424 http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html https://cve.imfht.com/detail/CVE-2018-20526
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCccm-detect: Clear-Com Core Configuration Manager Panel - Detect智慧物联网综合服务平台ListFileManager存在目录枚举漏洞PoCCVE-2026-64638: WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)WP User Manager /profile/admin/about 文件包含漏洞(CVE-2026-9290)SteVe /steve/manager/signin 默认口令漏洞PoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open RedirectPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionWP User Manager /profile/admin/about 本地文件包含漏洞月子会所ERP管理云平台WarningManager sidx参数存在SQL注入漏洞