Afian

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 14
    Known Exploited: 0
    1
    Critical Level Threats
    5
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2023-28875

    A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link.

    Last Modified: Nov 21, 2024
    Published: Dec 06, 2023

    CVE-2023-28876

    A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.

    Last Modified: Nov 21, 2024
    Published: Dec 06, 2023

    CVE-2022-30469

    In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman&section=get&page=grid` leads to SQL injection.

    Last Modified: Nov 21, 2024
    Published: Jun 06, 2022

    CVE-2022-30470

    In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously uploaded) jar file results in remote code execution in the context of the webserver user.

    Last Modified: Nov 21, 2024
    Published: Jun 01, 2022

    CVE-2021-35506

    Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action.

    Last Modified: Nov 21, 2024
    Published: Oct 05, 2021
    Items Per Page
    Afian Vulnerabilities & Security CVEs | CVE-DB