CVE-2024-9574 — SQL Injection vulnerability in SOPlanning
SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, a…
Published: 2024-10-07 · CVSS: 9.8 · CVSS 3.1
SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7