Description
Afian FileRun是一个功能齐全的基于 Web 的文件管理器。 Afian FileRun 2021.03.26 存在安全漏洞，该漏洞允许通过ffmpeg二进制文件的Check Path值执行远程代码。
Afian FileRun 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2022-30470
https://www.exploit-db.com/exploits/50313
https://nvd.nist.gov/vuln/detail/CVE-2021-35504
https://github.com/advisories/GHSA-pr28-96w5-x46p
https://syntegris-sec.github.io/filerun-advisory