CVE-2018-7734 | BDVDB-2026-97465 Detail

Description#

Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available
http://www.filerun.com/changelog
https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html

Exploit#

No public exploit known

History#

Version 12018-03-06Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.