CVE-2018-7735

Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=list_filetypes request.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2018-03-06

Last modified

2024-09-17

Weaknesses

CWE-89

Affected products

• Filerun (Afian)

References

• http://www.filerun.com/changelog
• https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available
• https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html