CVE-2020-9269

2020-02-1817:22:06

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.

References

github.com/J3rryBl4nks/SOPlanning/blob/master/InjectionIcalShell.md