CVE-2024-9573
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Published: Oct 7, 2024 / Updated: 43d ago
010
CVSS 6.5EPSS 0.04%Medium
CVE info copied to clipboard
SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which could allow a remote user to send a specially crafted query and extract all the information stored on the server.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Timeline
First Article
Feedly found the first article mentioning CVE-2024-9573. See article
Oct 7, 2024 at 2:55 PM / CVE
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 7, 2024 at 2:55 PM
CVE Assignment
NVD published the first details for CVE-2024-9573
Oct 7, 2024 at 3:15 PM
CVSS
A CVSS base score of 6.3 has been assigned.
Oct 7, 2024 at 3:20 PM / nvd
EPSS
EPSS Score was set to: 0.04% (Percentile: 9.7%)
Oct 8, 2024 at 9:58 AM
CVSS
A CVSS base score of 6.5 has been assigned.
Oct 8, 2024 at 6:50 PM / nvd
Affected Systems
Soplanning/soplanning
+null more
Attack Patterns
CAPEC-108: Command Line Execution through SQL Injection
+null more
News
CVE Alert: CVE-2024-9573 - https://www. redpacketsecurity.com/cve_aler t_cve-2024-9573/ # OSINT # ThreatIntel # CyberSecurity # cve_2024_9573
CVE Alert: CVE-2024-9573
No affected endpoints listed. Everyone that supports the site helps enable new functionality.
NA - CVE-2024-9573 - SQL injection vulnerability in SOPlanning
SQL injection vulnerability in SOPlanning
CVE-2024-9573
SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which could allow a remote user to send a specially crafted query and extract all the information stored on the...
CVE-2024-9573 | SOPlanning up to 1.44 Query groupe_list.php by sql injection
A vulnerability was found in SOPlanning up to 1.44 . It has been classified as critical . Affected is an unknown function of the file /soplanning/www/groupe_list.php of the component Query Handler . The manipulation of the argument by leads to sql injection. This vulnerability is traded as CVE-2024-9573 . It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
See 3 more articles and social media posts