SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.

Published Jan 9, 2020 · Updated Aug 5, 2024 · Assigned by mitre