Description (CNA)
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata§ion=cpanel&page=list_filetypes request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available
- http://www.filerun.com/changelog
- https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html
ADP enrichment
No English description supplied.