CVE-2014-8677

MEDIUM

SO Planning 1.32 - Multiple Vulnerabilities

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2014-8677 has a selected CVSS score of 5.3 (medium); EIP currently links 1 catalogued exploit.

Description

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and smarty/templates_c is not writable to execute arbitrary php code via a crafted database name.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBSO Planning 1.32 - Multiple VulnerabilitiesExploitDB exploitby Huy-Ngoc DAUNot analyzed1 file

linked to 5 vulnerabilities

ExploitDB
PoC details

References

5