cve/2024/CVE-2024-9574.md
2025-09-29 21:09:30 +02:00

826 B

CVE-2024-9574

Description

SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.

POC

Reference

No PoCs from references.

Github