critical9.8
CVE-2022-47532
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request.
Impact
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Filerun | Filerun | Version 20220519 |