fuzzlove/soplanning-1.52-exploits

fuzzlove/soplanning-1.52-exploits

GitHubGitHub
GitHubgithub.com
x.comx.com
Releases0
SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-33722↗
6.3 MEDIUM—

SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].

CVE-2024-33724↗
5.4 MEDIUM—

SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.