CVE-2018-7734 Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request.
HighCVSS 7.2
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| afian filerun | <= 2017.09.25 | No fix listed |
References
- www.filerun.com vendor-advisory
- feedback.filerun.com vendor-advisory
- www.scanfsec.com exploit third-party-advisory