CoreCVE

CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 58Last 7 days 2,688Total CVEs 401,298CISA KEV 1,733Critical 42,411 All stats
Clear
More filters (active)
Filters: Vendor: FileRun Remove filterProduct: FileRun Remove filter Clear all

Page 1

CVE-2026-73699 HIGH

FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()

CVSS 8.6 EPSS 0.78% Sep 10, 2026
CVE-2026-73698 HIGH

FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action

CVSS 8.6 EPSS 0.62% Sep 10, 2026
CVE-2026-73694 HIGH

FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition

CVSS 8.6 EPSS 2.24% Sep 10, 2026
CVE-2026-73693 HIGH

FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler

CVSS 8.7 EPSS 2.71% Sep 10, 2026
CVE-2026-14863 HIGH

FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection

CVSS 8.7 EPSS 2.54% Aug 11, 2026
CVE-2022-47532 CRITICAL

FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.

CVSS 9.8 EPSS 0.63% Dec 22, 2023
CVE-2017-14738 CRITICAL

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside t…

CVSS 9.8 EPSS 2.62% Sep 29, 2017
CVE-2007-2470 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via t…

CVSS 5.8 EPSS 1.65% May 2, 2007
CVE-2007-2469 HIGH

SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.

CVSS 7.5 EPSS 1.82% May 2, 2007

Showing 1 to 9 CVEs · page 1