Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
filerun vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-2470
Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter.
Filerun Filerun
NA
CVE-2007-2469
SQL injection vulnerability in index.php in FileRun 1.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the fid parameter.
Filerun Filerun
9.8
CVSSv3
CVE-2017-14738
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).
Filerun Filerun
1 EDB exploit
9.8
CVSSv3
CVE-2022-47532
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request.
Filerun Filerun 20220519
5.3
CVSSv3
CVE-2019-12459
FileRun 2019.05.21 allows customizables/plugins/audio_player Directory Listing. This issue has been fixed in FileRun 2019.06.01.
Afian Filerun
1 Github repository
7.2
CVSSv3
CVE-2018-7735
Afian FileRun (prior to 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata§ion=cpanel&page=list_filetypes request.
Afian Filerun
7.2
CVSSv3
CVE-2021-35505
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary.
Afian Filerun
4.3
CVSSv3
CVE-2023-28876
A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows malicious users to delete comments on files uploaded by other users.
Afian Filerun
7.2
CVSSv3
CVE-2018-7734
Afian FileRun (prior to 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request.
Afian Filerun
6.1
CVSSv3
CVE-2019-12905
FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman§ion=do&page=up URI. This issue has been fixed in FileRun 2019.06.01.
Afian Filerun
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »