Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.

Published Jun 7, 2018 · Updated Sep 17, 2024 · Assigned by mitre