Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FileRun SQL注入漏洞
Vulnerability Description
FileRun是一款可扩展的文件管理器，它具有文件共享、云端文件存储等功能。 FileRun 2017.09.18及之前的版本中存在SQL注入漏洞，该漏洞源于程序没有过滤元搜索模块内的‘metafield’参数中的输入。远程攻击者可利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A