Filerun

filerun

Vendor: Filerun • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-47532 1Filerun 1Filerun Jun 17, 2026 Dec 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.
CVE-2017-14738 1Filerun 1Filerun May 13, 2026 Sep 30, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).
CVE-2007-2470 1Filerun 1Filerun Apr 23, 2026 May 2, 2007 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter.
CVE-2007-2469 1Filerun 1Filerun Apr 23, 2026 May 2, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.