CVE-2022-30469

2022-06-0620:06:42

mitre

www.cve.org

afian filerun

sql injection

post parameter

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

33.2%

JSON

In Afian Filerun 20220202, lack of sanitization of the POST parameter “metadata[]” in /?module=fileman&section=get&page=grid leads to SQL injection.

References

filerun.com/changelog

github.com/blockomat2100/PoCs/blob/main/filerun/CVE-2022-30469.md