high7.2
CVE-2020-9269
SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.
Impact
SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Soplanning | Soplanning | Version 1.45 |