Filerun

9 CVEs across 1 Filerun products. Browse Filerun vulnerabilities, severities, and proof-of-concept exploits.

Filerun products with known CVEs

ProductCVEs
Filerun9
Filerun CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73699High7.22026-09-10FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect opt…
CVE-2026-73698High7.22026-09-10FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the descri…
CVE-2026-73694High7.22026-09-10FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd() in CLI.php that strips shell-metachar…
CVE-2026-73693High8.82026-09-10FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to…
CVE-2026-14863High8.82026-08-11FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code executio…
CVE-2022-47532Critical9.82023-12-22FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.
CVE-2017-14738Critical9.82017-09-30FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside t…
CVE-2007-24702007-05-02Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via t…
CVE-2007-24692007-05-02SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.