FI
Vendor
FileRun
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-73699 | FI FileRun FileRun | 7.2 | Sep 10 | FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms() |
| CVE-2026-73698 | FI FileRun FileRun | 7.2 | Sep 10 | FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action |
| CVE-2026-73694 | FI FileRun FileRun | 7.2 | Sep 10 | FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition |
| CVE-2026-73693 | FI FileRun FileRun | 8.8 | Sep 10 | FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler |
| CVE-2026-14863 | FI FileRun FileRun | 8.8 | Aug 11 | FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection |
| CVE-2022-47532 | FI Filerun Filerun | 9.8 | Dec 22 | FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request |
| CVE-2017-14738 | FI Filerun Filerun | 9.8 | Sep 30 | FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module… |
| CVE-2007-2470 | FI Filerun Filerun | – | May 2 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2)… |
| CVE-2007-2469 | FI Filerun Filerun | – | May 2 | SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter |