Skip to content
Afian Filerun vulnerabilities
-
afian filerun
A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202...
CVE-2023-28876
4.3 Medium
-
afian filerun
A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to...
CVE-2023-28875
5.4 Medium
-
afian filerun
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module...
CVE-2022-30469
8.8 High
-
afian filerun
In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously...
CVE-2022-30470
9.8 Critical
-
afian filerun
Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during...
CVE-2021-35506
6.1 Medium
-
afian filerun
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path...
CVE-2021-35505
7.2 High
-
afian filerun
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path...
CVE-2021-35504
7.2 High
-
afian filerun
Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled...
CVE-2021-35503
6.1 Medium
-
afian filerun
FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman§ion=do&page=up URI.
CVE-2019-12905
Public exploit
6.1 Medium
-
afian filerun
FileRun 2019.05.21 allows customizables/plugins/audio_player Directory Listing.
CVE-2019-12459
5.3 Medium
-
afian filerun
FileRun 2019.05.21 allows css/ext-ux Directory Listing.
CVE-2019-12458
5.3 Medium
-
afian filerun
FileRun 2019.05.21 allows images/extjs Directory Listing.
CVE-2019-12457
5.3 Medium
-
afian filerun
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged...
CVE-2018-7735
7.2 High
-
afian filerun
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged...
CVE-2018-7734
7.2 High