CVE-2020-9268

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur= substring...

CVE-2020-9268

SOPlanning 1.45 is vulnerable to SQL Injection in the ORDER BY clause (projets.php?order=nom_createur&by= substring). Root cause: unsafe concatenation/handling of ORDER BY inputs enabling attacker-controlled data. Impact: information disclosure demonstrated in public reports; CVSS/metrics indicat...