CVE-2022-30469

Description

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman§ion=get&page=grid` leads to SQL injection.

Affected Platforms

Weakness Type

CWE-89

References

• https://filerun.com/changelog
• https://github.com/blockomat2100/PoCs/blob/main/filerun/CVE-2022-30469.md
• https://filerun.com/changelog
• https://github.com/blockomat2100/PoCs/blob/main/filerun/CVE-2022-30469.md