CVE-2022-47532: SQL Injection

Published Dec 22, 2023

Updated

FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.

Affected Software

1 affected component

FileRun FileRun=20220519

Dec 22, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

CVE-2022-47532 has a critical severity score of 9.8.

CVE-2022-47532 is an SQL Injection vulnerability.

To fix CVE-2022-47532, ensure that input sanitization is implemented for the 'dir' parameter in the affected application.

The affected application is FileRun, specifically version 20220519.

CVE-2022-47532 can lead to unauthorized access to sensitive data due to SQL Injection.