PT-2020-7754 · Unknown · Soplanning

Huy-Ngoc Dau · Published 2020-01-07 · Updated 2020-01-08 · CVE-2014-8673

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SOPPlanning versions prior to 1.33

Description Multiple SQL vulnerabilities exist in various PHP files, including planning.php, user list.php, projets.php, user groupes.php, and groupe list.php.

Recommendations For versions prior to 1.33, update to version 1.33 or later to resolve the issue.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-8673

Affected Products

Soplanning

References · 5

• 🔥 http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Jul/44 · Exploit
• 🔥 http://securityfocus.com/bid/75726 · Exploit
• 🔥 https://exploit-db.com/exploits/37604 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8673 · Security Note