CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7735

CVE-2018-7735 describes a remote SQL injection in Afian FileRun (pre-2018.02.13) exploitable when logged in as superuser via the search parameter in the URL path /?module=metadata&section=cpanel&page=list_filetypes. The issue stems from input in the search parameter that is used in SQL without pr...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

PT-2018-18246

Name of the Vulnerable Software and Affected Versions: Afian FileRun versions prior to 2018.02.13 Description: The issue allows for remote SQL injection when logged in as a superuser. This occurs via the search parameter in a "/?module=metadata&section=cpanel&page=list filetypes" API endpoint...

PT-2018-18245

Name of the Vulnerable Software and Affected Versions: Afian FileRun versions prior to 2018.02.13 Description: The issue allows for remote SQL injection when an attacker is logged in as a superuser. This can be achieved via the search parameter in a "/?module=users&section=cpanel&page=list" API...

CVE-2018-7735: Improper Neutralization of Special Elements used in an SQL Command

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7734: Improper Neutralization of Special Elements used in an SQL Command

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...