SQL Injection Vulnerability in FileRun by FileRun
CVE-2007-2469

Currently unrated

Key Information:

Vendor

Filerun

Status
Filerun
Vendor
CVE Published:
2 May 2007

What is CVE-2007-2469?

FileRun 1.0 and earlier versions are susceptible to an SQL injection vulnerability found in index.php. This flaw permits remote attackers to manipulate the fid parameter, leading to the execution of arbitrary SQL commands within the database. Exploiting this vulnerability can result in unauthorized access to sensitive data, making it crucial for users to implement appropriate security measures and updates to mitigate risks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34006
vdb-entryx_refsource_XF
http://secunia.com/advisories/25075
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/1627
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.