CVE-2017-14738 FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search fu...
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| FileRun | <= 2017.09.18 | No fix listed |
References
- feedback.filerun.com patch vendor-advisory
- blog.spentera.com exploit third-party-advisory
- 42922 exploit third-party-advisory vdb-entry