Login Request a demo
Unscored severity · published May 2, 2007
CVE-2007-2469
SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter
–
CVSS
1.8%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Filerun · Filerun
through 1.0 · source: NVD
Affected product
FI
Filerun
Filerun
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2469
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2469
pridels0.blogspot.com
http://pridels0.blogspot.com/2007/05/filerun-vuln.html
Vendor Advisory
http://secunia.com/advisories/25075
www.securityfocus.com
http://www.securityfocus.com/bid/23752
www.vupen.com
http://www.vupen.com/english/advisories/2007/1627
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34006
More from Filerun
9.8
CVE-2022-47532
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request
9.8
CVE-2017-14738
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module…
8.8
CVE-2026-73693
FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler
8.8
CVE-2026-14863
FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
7.2
CVE-2026-73699
FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()