Design/Logic Flaw

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12459

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12459

CVE-2019-12459 describes a directory listing vulnerability in FileRun 2019.05.21 related to customizables/plugins/audio_player. Multiple sources (NVD, Red Hat, CNVD) corroborate that the issue exists in FileRun and was fixed in 2019.06.01. The Red Hat entry and other records align on the same des...

CVE-2019-12458

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12458

CVE-2019-12458 affects FileRun; the 2019.05.21 release is vulnerable to a css/ext-ux Directory Listing issue. The vulnerability is resolved in FileRun 2019.06.01 . Documents do not provide exploitation specifics or root-cause details beyond the listing exposure. Impact is described as potential d...

CVE-2019-12457

CVE-2019-12457 affects FileRun (version 2019.05.21) and allows directory listing of images/extjs. Root cause is not fully detailed in the provided documents, but the issue has been fixed in FileRun 2019.06.01. The CVE entry is corroborated by multiple sources (NVD, Red Hat advisory) and CNVD/CVEL...

CVE-2019-12457

FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01...

Afian FileRun SQL Injection Vulnerability

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

Afian FileRun SQL Injection Vulnerability (CNVD-2018-06552)

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

Sql injection

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

Sql injection

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7735

CVE-2018-7735 describes a remote SQL injection in Afian FileRun (pre-2018.02.13) exploitable when logged in as superuser via the search parameter in the URL path /?module=metadata&section=cpanel&page=list_filetypes. The issue stems from input in the search parameter that is used in SQL without pr...

CVE-2018-7734

Afian FileRun is affected by a remote SQL injection in versions prior to 2018-02-13. The issue occurs when an attacker is logged in as superuser and uses the search parameter in the /?module=users&section=cpanel&page=list request to inject SQL commands. Root cause: improper input handling in the ...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

Afian AB FileRun 2017.03.18 - Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================================= title: Multiple vulnerabilities product: Afian AB FileRun vulnerable version: 2017.03.18 fixed version: 2017.09.18 impact: critical homepage: https://www.filerun.com |...