Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-9573

SQL Injection vulnerability in SOPlanning

Description

SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which could allow a remote user to send a specially crafted query and extract all the information stored on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SOPlanning SOPlanning

Default version status: unaffected

  • 0 to < 1.45affected

References