high7.2
CVE-2018-7734
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&…
Impact
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Afian | Filerun | through 2017.09.25 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.filerun.com/changelog
- https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available
- https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html
- http://www.filerun.com/changelog
- https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available
- https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html