Inflectra SpiraTeam PlanningBoard yAxisKey SQLi RCE

Authenticated PlanningBoardMoveItems yAxisKey SQL injection reaches REQUIREMENTRETRIEVECUSTOM EXEC@SQL and xpcmdshell Windows. !/usr/bin/env python3 -- coding: utf-8 -- """Inflectra SpiraTeam PlanningBoard yAxisKey SQLi to xpcmdshell RCE.""" from future import annotations import json import re...