CVE-2017-14738

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-30

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Filerun (Filerun)

References

• http://feedback.filerun.com/topics/189-critical-security-update-available/
• https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18/
• https://www.exploit-db.com/exploits/42922/