Vulnerabilities (CVE)

Filtered by vendor Filerun Subscribe
Filtered by product Filerun
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-47532 1 Filerun 1 Filerun 2024-01-02 N/A 9.8 CRITICAL
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.
CVE-2017-14738 1 Filerun 1 Filerun 2017-10-10 7.5 HIGH 9.8 CRITICAL
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).