CVE-2022-30469

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman&section=get&page=grid leads to SQL injection...

Afian FileRun SQL注入漏洞

Afian FileRun is a full-featured web-based file manager. sql injection vulnerability exists in Afian Filerun version 20220202, which stems from a lack of cleanup of the POST parameter metadata in the /?module=fileman§ion=get&page=grid page. An attacker could exploit this vulnerability to cause SQ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 gridPage and 2 gridSort parameters. NOTE: some of these details are obtained from third party information...