Sql injection

2018-03-0619:29:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=list_filetypes request.

CPENameOperatorVersion
filerunle2017.09.25

CPE	Name	Operator	Version
	filerun	le	2017.09.25

References

www.filerun.com/changelog

feedback.filerun.com/communities/1/topics/189-critical-security-update-available

www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html