CVE-2014-8673

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• SO Planning 1.32 - Multiple Vulnerabilities2015-07-13 · webapps · php

Impact

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Planning (SOPPlanning)before 1.33.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html
• http://seclists.org/fulldisclosure/2015/Jul/44
• http://www.securityfocus.com/bid/75726
• https://www.exploit-db.com/exploits/37604/
• http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html
• http://seclists.org/fulldisclosure/2015/Jul/44
• http://www.securityfocus.com/bid/75726
• https://www.exploit-db.com/exploits/37604/