EUVD-2024-31432

SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut...

CVE-2024-33722

SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut...

CVE-2024-33722

The SOPlanning project management software (version 1.52.00 ) is vulnerable to SQL Injection via the projets.php script. The root cause is a lack of protective measures for the SQL query structure, specifically involving the statut[] parameter. An authenticated user can exploit this to execute ar...