← All advisories

High severity7.5NVD Advisory· Published Feb 18, 2020· Updated Jun 17, 2026

CVE-2020-9268

CVE-2020-9268

Description

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Soplanning/Soplanning2 versions
cpe:2.3:a:soplanning:soplanning:1.45:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:soplanning:soplanning:1.45:*:*:*:*:*:*:*
- (no CPE)range: =1.45
SoPlanning/SoPlanningdescription

Patches

Vulnerability mechanics

References

1

github.com/J3rryBl4nks/SOPlanning/blob/master/SQLInjectionProjects.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.