Afian: >> Filerun >> 2015.09.02 Security Vulnerabilities
A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-12-06
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary.
CVSS Score
7.2
EPSS Score
0.095
Published
2021-10-05
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary.
CVSS Score
7.2
EPSS Score
0.032
Published
2021-10-05
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request.
CVSS Score
7.2
EPSS Score
0.009
Published
2018-03-06
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata§ion=cpanel&page=list_filetypes request.
CVSS Score
7.2
EPSS Score
0.009
Published
2018-03-06