CVE-2017-14738 | BDVDB-2026-91060 Detail

Description#

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://feedback.filerun.com/topics/189-critical-security-update-available/
https://www.exploit-db.com/exploits/42922/
https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18/

Exploit#

https://www.exploit-db.com/exploits/42922/

History#

Version 12017-09-29Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.