Description (CNA)
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman§ion=get&page=grid` leads to SQL injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://filerun.com/changelog
- https://github.com/blockomat2100/PoCs/blob/main/filerun/CVE-2022-30469.md
ADP enrichment
No English description supplied.