Lucene search
+L

8 matches found

NVD
NVD
•added 2026/07/09 11:16 a.m.•18 views

CVE-2026-50644

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

8.6CVSS0.00469EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/09 9:57 a.m.•16 views

CVE-2026-50644 SQL Injection in SOPlanning Audit Retention Configuration

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

8.6CVSS6.2AI score0.00469EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/09 9:57 a.m.•58 views

CVE-2026-50644 SQL Injection in SOPlanning Audit Retention Configuration

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

8.6CVSS0.00469EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/09 9:57 a.m.•17 views

CVE-2026-50644

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

8.6CVSS6.2AI score0.00469EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/09 9:57 a.m.•38 views

CVE-2026-50644

CVE-2026-50644 affects SOPlanning. The vulnerability is an SQL injection in the audit retention configuration, exploitable by an attacker with high privileges (parameters_all rights) who can inject SQL through the audit configuration form; execution occurs when the audit functionality is accessed...

8.6CVSS6.2AI score0.00469EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/09 9:57 a.m.•21 views

EUVD-2026-42576

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

8.6CVSS6.2AI score0.00469EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/09 12:00 a.m.•2 views

CVE-2026-50644: Improper Neutralization of Special Elements used in an SQL Command

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

8.6CVSS5.9AI score0.00469EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/09 12:00 a.m.•25 views

PT-2026-56774

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parameters all rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

8.6CVSS6.2AI score0.00469EPSS
SaveExploits0References3
Rows per page
Query Builder