Afian vulnerabilities

Products

• Filerun 14

Newest

• afian filerun A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202... CVE-2023-28876 4.3 MediumDecember 6, 2023
• afian filerun A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to... CVE-2023-28875 5.4 MediumDecember 6, 2023
• afian filerun In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module... CVE-2022-30469 8.8 HighJune 6, 2022
• afian filerun In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously... CVE-2022-30470 9.8 CriticalJune 1, 2022
• afian filerun Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during... CVE-2021-35506 6.1 MediumOctober 5, 2021
• afian filerun Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path... CVE-2021-35505 7.2 HighOctober 5, 2021
• afian filerun Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path... CVE-2021-35504 7.2 HighOctober 5, 2021
• afian filerun Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled... CVE-2021-35503 6.1 MediumOctober 5, 2021
• afian filerun FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. CVE-2019-12905 Public exploit 6.1 MediumJune 20, 2019
• afian filerun FileRun 2019.05.21 allows customizables/plugins/audio_player Directory Listing. CVE-2019-12459 5.3 MediumMay 30, 2019
• afian filerun FileRun 2019.05.21 allows css/ext-ux Directory Listing. CVE-2019-12458 5.3 MediumMay 30, 2019
• afian filerun FileRun 2019.05.21 allows images/extjs Directory Listing. CVE-2019-12457 5.3 MediumMay 30, 2019
• afian filerun Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged... CVE-2018-7735 7.2 HighMarch 6, 2018
• afian filerun Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged... CVE-2018-7734 7.2 HighMarch 6, 2018