Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: SOPlanning 1.45 Clear all filters
TI-2024-08883 CVE-2024-9574 · GHSA-5mch-6pwv-9qcv

SQL Injection vulnerability in SOPlanning

Priority MEDIUM 43

SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the inf…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2024-10-07 Fixed in 1.45 CWE-89
TI-2024-08882 CVE-2024-9573 · GHSA-x9gf-8wx8-vgh8

SQL Injection vulnerability in SOPlanning

Priority LOW 31

SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which could allow a remote user to send a specially crafted query and extract all the information stored on t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.003 Published 2024-10-07 Fixed in 1.45 CWE-89
TI-2024-08881 CVE-2024-9572 · GHSA-9377-p242-8m6p

Cross-Site Scripting vulnerability in SOPlanning

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplanning/www/process/groupe_save.php, in the groupe_id parameter.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00286 Published 2024-10-07 Fixed in 1.45 CWE-79
TI-2024-08880 CVE-2024-9571 · GHSA-gxgq-8g7h-rw9j

Cross-Site Scripting vulnerability in SOPlanning

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplanning/www/process/xajax_server.php, affecting multiple parameters.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00286 Published 2024-10-07 Fixed in 1.45 CWE-79