CVEs-PoC/2020/CVE-2020-9268.md

CVE-2020-9268

Description

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/InesMartins31/iot-cves
• https://github.com/J3rryBl4nks/SOPlanning
• https://github.com/cyb3r-w0lf/nuclei-template-collection