Unscored CVE-2020-9269 EUVD-2020-30098GHSA-9wfj-vqgr-qfpp

SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by ex…

Published Feb 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.

References

https://github.com/J3rryBl4nks/SOPlanning/blob/master/InjectionIcalShell.md