5 matches found
CVE-2024-9574
SQL injection vulnerability in SOPlanning 1.45, via /soplanning/www/usergroupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB...
Sql injection
Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...
CVE-2014-8673
Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...
CVE-2014-8673
SOPPlanning (Simple Online Planning) is affected by CVE-2014-8673 before v1.33. Multiple SQL injection vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php due to insufficient input sanitization and unsafe SQL construction. Red‑team/Exploit refe...
CVE-2014-8673: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...