68 matches found
CVE-2021-35505
Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the magick binary...
CVE-2021-35504
Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...
CVE-2021-35503
CVE-2021-35503 affects Afian FileRun 2021.03.26. The issue is a stored XSS caused by mishandling of the HTTP X-Forwarded-For header when rendering Activity Logs, implying user-supplied header data could be reflected in logs and executed in the browser. The description identifies the affected comp...
CVE-2021-35503
Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs...
PT-2021-20946
Name of the Vulnerable Software and Affected Versions: Afian FileRun version 2021.03.26 Description: The issue allows for XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action. Recommendations: For Afian FileRun version 2021.03.26, upda...
Afian FileRun 跨站脚本漏洞
Afian FileRun is a full-featured web-based file manager. Afian FileRun 2021.03.26 A cross-site scripting vulnerability can be exploited by an attacker to cause an administrator to encounter a crafted document while performing a preview or editing operation using an HTML editor...
PT-2021-20943
Name of the Vulnerable Software and Affected Versions: Afian FileRun version 2021.03.26 Description: The issue allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs. Recommendations: For Afian FileRun version 2021.03.26, consider disabling the...
CVE-2021-35505: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the magick binary...
PT-2021-20945
Name of the Vulnerable Software and Affected Versions: Afian FileRun version 2021.03.26 Description: The issue allows remote code execution by administrators through the Check Path value for the magick binary. Recommendations: For Afian FileRun version 2021.03.26, consider restricting access to t...
CVE-2021-35506: Improper Neutralization of Input During Web Page Generation
Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action...
PT-2021-20944
Name of the Vulnerable Software and Affected Versions: Afian FileRun version 2021.03.26 Description: The issue allows Remote Code Execution by administrators through the Check Path value for the ffmpeg binary. Recommendations: For Afian FileRun version 2021.03.26, consider restricting access to t...
CVE-2021-35504: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...
CVE-2021-35503: Improper Neutralization of Input During Web Page Generation
Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs...
Afian FileRun 注入漏洞
Afian FileRun is a full-featured web-based file manager. A security vulnerability exists in Afian FileRun 2021.03.26 that allows remote code execution...
Afian FileRun 注入漏洞
Afian FileRun is a full-featured web-based file manager. A security vulnerability exists in Afian FileRun 2021.03.26 that allows remote code execution via the Check Path value of ffmpeg binaries...
Afian FileRun SQL Injection Vulnerability
Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...
Afian FileRun SQL Injection Vulnerability (CNVD-2018-06552)
Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...
Sql injection
Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata§ion=cpanel&page=listfiletypes request...
Sql injection
Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request...
