CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 2CVE-2019-12458
https://notcve.org/view.php?id=CVE-2019-12458
FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01. FileRun hasta el 21-05-2019, permite lista de directorios (Directory Listing) de css/ext-ux. Este problema se ha solucionado en FileRun 01.06.2019. • https://emreovunc.com/blog/en/FileRun-DirectoryListing-2.png https://filerun.com/changelog https://github.com/EmreOvunc/FileRun-Vulnerabilities https://github.com/EmreOvunc/FileRun-Vulnerabilities/issues/3 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 2CVE-2019-12457
https://notcve.org/view.php?id=CVE-2019-12457
FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01. FileRun hasta el 21-05-2019, permite lista de directorios (Directory Listing) de images/extjs. Este problema se ha solucionado en FileRun 01.06.2019. • https://emreovunc.com/blog/en/FileRun-DirectoryListing-1.png https://filerun.com/changelog https://github.com/EmreOvunc/FileRun-Vulnerabilities https://github.com/EmreOvunc/FileRun-Vulnerabilities/issues/3 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1CVE-2018-7734
https://notcve.org/view.php?id=CVE-2018-7734
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request. Afian FileRun (en versiones anteriores a la 2018.02.13) sufre de una vulnerabilidad de inyección SQL remota al iniciar sesión como superusuario mediante el parámetro search en una petición /?module=userssection=cpanelpage=list. • http://www.filerun.com/changelog https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1CVE-2018-7735
https://notcve.org/view.php?id=CVE-2018-7735
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata§ion=cpanel&page=list_filetypes request. Afian FileRun (en versiones anteriores a la 2018.02.13) sufre de una vulnerabilidad de inyección SQL remota al iniciar sesión como superusuario mediante el parámetro search en una petición /?module=metadatasection=cpanelpage=list_filetypes. • http://www.filerun.com/changelog https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2CVE-2017-14738 – FileRun < 2017.09.18 - SQL Injection
https://notcve.org/view.php?id=CVE-2017-14738
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function). FileRun (versión 2017.09.18 y anteriores) tiene una vulnerabilidad de inyección remota de SQL debido a un error a la hora de sanitizar las entradas en el parámetro metafield dentro del módulo metasearch (bajo la función search). FileRun versions 2017.09.18 and below suffer from a remote SQL injection vulnerability. • https://www.exploit-db.com/exploits/42922 http://feedback.filerun.com/topics/189-critical-security-update-available https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •