CVE Feed

    Dashboard / CVE / CVE-2017-14738

    CVE-2017-14738

    FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).

    Published:Sep 29, 2017
    Last Modified:Apr 20, 2025
    EPS:Sep 29, 2017
    EPSS Score:0.06269
    CVSS Score:9.8

    Affected Products

    Vendor
    Filerun
    Product
    Filerun

    Exploits

    https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18/https://www.exploit-db.com/exploits/42922/https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18/https://www.exploit-db.com/exploits/42922/https://www.exploit-db.com/exploits/42922

    Related CVEs

    CVE-2026-73699 (CVSS 8.6) — FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to e…
    CVE-2026-73698 (CVSS 8.6) — FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators …
    CVE-2026-73694 (CVSS 8.6) — FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escap…
    CVE-2026-73693 (CVSS 8.7) — FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that all…
    CVE-2026-14863 (CVSS 8.7) — FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authen…
    CVE-2022-47532 (CVSS 9.8) — FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list req…
    CVE-2007-2470 (CVSS 5.8) — Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attac…
    CVE-2007-2469 (CVSS 7.5) — SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitra…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High