Login Request a demo
FI
Product
FileRun
by FileRun · last CVE Sep 10, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 5Medium 0Low 0
Severity
All severities9Critical2High5Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FileRun to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-47532
9.8
1%
Dec 22
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request
Affected: 20220519
CVE-2017-14738
9.8
3%
Sep 30
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module…
Affected: through 2017.09.18
CVE-2026-73693
8.8
3%
Sep 10
FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler
Affected: before 2026.3.0
CVE-2026-14863
8.8
3%
Aug 11
FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
Affected: through 2026.2.0
CVE-2026-73699
7.2
1%
Sep 10
FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()
Affected: before 2026.3.0
CVE-2026-73698
7.2
1%
Sep 10
FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action
Affected: before 2026.3.0
CVE-2026-73694
7.2
2%
Sep 10
FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition
Affected: before 2026.3.0
CVE-2007-2469
–
2%
May 2
SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter
Affected: through 1.0
CVE-2007-2470
–
2%
May 2
Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2)…
Affected: through 1.0
Showing 9