İçeriğe atla
Noroxi

SOPlanning kayıtları

soplanning üreticisine ait 34 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%23,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 20
  3. 21
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

34 kayıt
  • CVE-2014-8673
    43Planlayın

    Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Plann

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    soplanning · soplanning7 Oca 2020

  • CVE-2024-27115
    41Planlayın

    Remote Code Execution through File Upload in SOPlanning before 1.52.02

    KritikCVSS 10,0Kavram kanıtıEPSS %4

    soplanning · soplanning11 Eyl 2024

  • CVE-2020-13963
    40Planlayın

    SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is pub

    KritikCVSS 9,8İstismar yokEPSS %1

    soplanning · soplanning21 Mar 2021

  • CVE-2024-57169
    39İzleyin

    A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php.

    KritikCVSS 9,8İstismar yokEPSS %0

    soplanning · soplanning18 Mar 2025

  • CVE-2024-27113
    37İzleyin

    Insecure Direct Object Reference to export Database in SOPlanning before 1.52.02

    KritikCVSS 9,3İstismar yokEPSS %0

    soplanning · soplanning11 Eyl 2024

  • CVE-2024-27112
    37İzleyin

    SQL Injection in SOPlanning before 1.52.02

    KritikCVSS 9,3İstismar yokEPSS %0

    soplanning · soplanning11 Eyl 2024

  • CVE-2019-20179
    35İzleyin

    SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.

    YüksekCVSS 8,8İstismar yokEPSS %1

    soplanning · soplanning9 Oca 2020

  • CVE-2024-27114
    35İzleyin

    Remote Code Execution through File Upload in SOPlanning before 1.52.02

    YüksekCVSS 8,9İstismar yokEPSS %0

    soplanning · soplanning11 Eyl 2024

  • CVE-2014-8675
    34İzleyin

    Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    soplanning · soplanning31 Ağu 2017

  • CVE-2025-62294
    34İzleyin

    Predictable Generation of Password Recovery Token

    YüksekCVSS 8,7İstismar yokEPSS %0

    soplanning · soplanning20 Kas 2025

  • CVE-2025-62730
    34İzleyin

    Privilege Escalation via Incorrect Authorization in SOPlanning

    YüksekCVSS 8,7İstismar yokEPSS %0

    soplanning · soplanning20 Kas 2025

  • CVE-2014-8676
    33İzleyin

    Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the

    OrtaCVSS 5,3Kavram kanıtıEPSS %40

    soplanning · soplanning31 Ağu 2017

  • CVE-2020-9268
    30İzleyin

    SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring.

    YüksekCVSS 7,5İstismar yokEPSS %1

    soplanning · soplanning18 Şub 2020

  • CVE-2020-9269
    29İzleyin

    SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by exp

    YüksekCVSS 7,2İstismar yokEPSS %2

    soplanning · soplanning18 Şub 2020

  • CVE-2024-57170
    26İzleyin

    SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    soplanning · soplanning18 Mar 2025

  • CVE-2024-9574
    26İzleyin

    SQL Injection vulnerability in SOPlanning

    OrtaCVSS 6,5İstismar yokEPSS %0

    soplanning · soplanning7 Eki 2024

  • CVE-2020-9266
    26İzleyin

    SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajax_server.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    soplanning · soplanning18 Şub 2020

  • CVE-2020-9267
    26İzleyin

    SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    soplanning · soplanning18 Şub 2020

  • CVE-2024-9573
    26İzleyin

    SQL Injection vulnerability in SOPlanning

    OrtaCVSS 6,5İstismar yokEPSS %0

    soplanning · soplanning7 Eki 2024

  • CVE-2014-8677
    22İzleyin

    The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existi

    OrtaCVSS 5,3Kavram kanıtıEPSS %3

    soplanning · soplanning31 Ağu 2017

  • CVE-2020-25867
    22İzleyin

    SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings.

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    soplanning · soplanning7 Eki 2020

  • CVE-2014-8674
    22İzleyin

    Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_m

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    soplanning · soplanning6 Oca 2020

  • CVE-2020-9339
    21İzleyin

    SOPlanning 1.45 allows XSS via the Name or Comment to status.php.

    OrtaCVSS 5,4İstismar yokEPSS %0

    soplanning · soplanning22 Şub 2020

  • CVE-2020-15597
    21İzleyin

    SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field.

    OrtaCVSS 5,4İstismar yokEPSS %0

    soplanning · soplanning11 Ağu 2020

  • CVE-2020-9338
    21İzleyin

    SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.

    OrtaCVSS 5,4İstismar yokEPSS %0

    soplanning · soplanning22 Şub 2020