CVE-2022-30469

Name of the Vulnerable Software and Affected Versions Afian Filerun version 20220202

Description The issue is related to a lack of sanitization of the POST parameter metadata[] in the /module=fileman&section=get&page=grid endpoint, which leads to SQL injection.

Recommendations For Afian Filerun version 20220202, consider disabling the /?module=fileman&section=get&page=grid endpoint until a patch is available to prevent SQL injection attacks. Restrict access to the metadata[] parameter in the affected endpoint to minimize the risk of exploitation.