soplanning-1.52-exploits

Exploit Title: SOPlanning v1.52.00 'groupesave.php' XSS Reflected XSS Application: SOPlanning Version: 1.52.00 Date: 4/22/24 Exploit Author: Joseph McPeters Liquidsky Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/ Tested on: Linux CVE:...

CVE-2024-33722

SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut...

CVE-2024-33722: Improper Neutralization of Special Elements used in an SQL Command

SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut...

EUVD-2020-30097

Malware in sbrugna...

The vulnerability in the projets.php script of the SOPlanning CMS system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the projets.php script within the SOPlanning CMS system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

PT-2024-3890

Name of the Vulnerable Software and Affected Versions: SOPlanning Simple Online Planning versions affected versions not specified Description: The issue is related to a lack of protection against SQL query structure exploitation in the projets.php script of the SOPlanning CMS system. This could...

CVE-2020-9268

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

CVE-2020-9268: Improper Neutralization of Special Elements used in an SQL Command

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

PT-2020-20562

Name of the Vulnerable Software and Affected Versions SoPlanning version 1.45 Description The issue concerns SQL Injection in the OrderBy clause. This is demonstrated through the projets.php endpoint with specific parameters, such as order=nom createur and by=substring. Recommendations For...

Sql injection

Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...

CVE-2014-8673

SOPPlanning (Simple Online Planning) is affected by CVE-2014-8673 before v1.33. Multiple SQL injection vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php due to insufficient input sanitization and unsafe SQL construction. Red‑team/Exploit refe...

CVE-2014-8673

Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...

CVE-2014-8673: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...

PT-2020-7754

Name of the Vulnerable Software and Affected Versions SOPPlanning versions prior to 1.33 Description Multiple SQL vulnerabilities exist in various PHP files, including planning.php, user list.php, projets.php, user groupes.php, and groupe list.php. Recommendations For versions prior to 1.33, upda...