Critical severity9.8NVD Advisory· Published Oct 7, 2024· Updated Jun 17, 2026
CVE-2024-9574
CVE-2024-9574
Description
SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:soplanning:soplanning:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:soplanning:soplanning:*:*:*:*:*:*:*:*range: <1.45
- (no CPE)range: <1.45
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-soplanningnvdThird Party Advisory
News mentions
0No linked articles in our index yet.