SOPlanning SQL Injection Vulnerability

A SQL injection vulnerability has been identified in SOPlanning, an online project management tool, affecting all versions through 1.55. This vulnerability allows attackers with low privileges to inject arbitrary SQL commands, potentially leading to full control over the application's database. The issue arises from improper input validation across multiple endpoints and parameters, leaving the application susceptible to SQL injection attacks.

Impact

Exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands, potentially compromising the application's database integrity and confidentiality.