CVE-2018-7735: Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as supe...

Security readout for executives and security teams

CVE-2018-7735 is a SQL injection flaw in Afian FileRun before 2018.02.13. It requires the attacker to already be logged in as a superuser. That limits likely abuse, but compromise of a superuser account could let an attacker manipulate backend database queries through FileRun’s metadata control panel search function. Exposure is likely limited to FileRun deployments older than 2018.02.13 where superuser access is available through the web interface. Internet-facing admin access or weak superuser account controls increase business risk. Address during normal vulnerability remediation unless FileRun admin access is internet-facing or superuser accounts are poorly controlled. In those cases, prioritize upgrade and access restriction promptly. Mitigation focus: Upgrade FileRun to 2018.02.13 or later, following vendor guidance.; Restrict FileRun administrative access to trusted networks or VPN.; Review and reduce superuser accounts to the minimum required..

Prepared

Jun 7, 2026, 18:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.