Lucene search

Filerun Security Vulnerabilities

cve

CVE-2007-2469

SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.

8.4AI Score

0.006EPSS

2007-05-02 11:19 PM

cve

CVE-2007-2470

Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter.

5.8AI Score

0.007EPSS

2007-05-02 11:19 PM

cve

CVE-2017-14738

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).

9.8CVSS

9.7AI Score

0.004EPSS

2017-09-30 01:29 AM

cve

CVE-2022-47532

FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.

9.8CVSS

9.8AI Score

0.001EPSS

2023-12-22 04:15 AM