CVEs-PoC/2017/CVE-2017-14738.md

CVE-2017-14738

Description

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).

POC

Reference

• https://www.exploit-db.com/exploits/42922/
• https://www.exploit-db.com/exploits/42922/

Github

• https://github.com/ARPSyndicate/cvemon