CVE-2019-20179

HIGH

soplanning < 1.45 - SQL Injection via user_list.php by Parameter

Title source: llm

SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.

Core 1

Core References

Various Sources x_refsource_misc

CVSS v3 8.8

EPSS 0.0102

EPSS Percentile 59.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (1)

soplanning/soplanning < 1.45

Published Jan 09, 2020

Tracked Since Feb 18, 2026