PT-2019-12805

Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2019.06.01 Description The issue allows directory listing in the customizables/plugins/audio player directory. This has been fixed in a later version. Recommendations For versions prior to 2019.06.01, update to versio...

PT-2019-12804

Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2019.06.01 Description The issue allows directory listing in the css/ext-ux directory. This has been fixed in a later version. Recommendations For versions prior to 2019.06.01, update to version 2019.06.01 or later to...

CVE-2019-12459: Improper Limitation of a Pathname to a Restricted Directory

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

PT-2019-12803

Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2019.06.01 Description The issue allows directory listing in the images/extjs directory. This has been fixed in a later version. Recommendations For versions prior to 2019.06.01, update to version 2019.06.01 or later ...

FileRun-Vulnerabilities

FileRun Vulnerabilities and Exploits FileRunhttps://filerun...

Afian FileRun SQL Injection Vulnerability

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

Afian FileRun SQL Injection Vulnerability (CNVD-2018-06552)

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

Sql injection

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

Sql injection

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

CVE-2018-7734

Afian FileRun is affected by a remote SQL injection in versions prior to 2018-02-13. The issue occurs when an attacker is logged in as superuser and uses the search parameter in the /?module=users&section=cpanel&page=list request to inject SQL commands. Root cause: improper input handling in the ...

CVE-2018-7735

CVE-2018-7735 describes a remote SQL injection in Afian FileRun (pre-2018.02.13) exploitable when logged in as superuser via the search parameter in the URL path /?module=metadata&section=cpanel&page=list_filetypes. The issue stems from input in the search parameter that is used in SQL without pr...

PT-2018-18246

Name of the Vulnerable Software and Affected Versions: Afian FileRun versions prior to 2018.02.13 Description: The issue allows for remote SQL injection when logged in as a superuser. This occurs via the search parameter in a "/?module=metadata&section=cpanel&page=list filetypes" API endpoint...

PT-2018-18245

Name of the Vulnerable Software and Affected Versions: Afian FileRun versions prior to 2018.02.13 Description: The issue allows for remote SQL injection when an attacker is logged in as a superuser. This can be achieved via the search parameter in a "/?module=users&section=cpanel&page=list" API...

CVE-2018-7734: Improper Neutralization of Special Elements used in an SQL Command

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...