CVE-2022-30469 Information

Description

In Afian Filerun 20220202 lack of sanitization of the POST parameter \metadata[]\ in /?module=fileman&section=get&page=grid leads to SQL injection.

Reference

https://github.com/blockomat2100/PoCs/blob/main/filerun/CVE-2022-30469.md https://filerun.com/changelog