What’s Vulnerable › Vulnerabilities

CVE-2018-7734

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-03-06 · updated 2026-06-17
• Weakness: CWE-89

Description

Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request.

Affected products

• Afian Filerun: through 2017.09.25

References

• http://www.filerun.com/changelog
• https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available
• https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html
• http://www.filerun.com/changelog
• https://feedback.filerun.com/communities/1/topics/189-critical-security-update-available
• https://www.scanfsec.com/FileRun_2017_09_25_Blind_SQL.html

Get alerted when CVE-2018-7734 or the next vulnerability affects your stack