SOPlanning 1.53.00

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:soplanning:soplanning:1.53.00:*:*:*:*:*:*:*

part: a version: 1.53.00 update: *

VendorSoplanning (ee19b31f-0942-566a-81aa-b4d787d11442)
ProductSoplanning (c9b112b8-24b5-5eab-a9fd-85b6707df140)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/worteks/soplanning purl2cpe 2026-06-01 10:12:58.986095
pkg:sourceforge/soplanning purl2cpe 2026-06-01 10:12:58.986097

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-57170 vulnerable 2026-06-08 06:56:13.403644 Details available
SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences (e.g., ../). This vulnerability enables attackers to delete arbitrary files outside the intended upload directory, potentially leading to denial of service or disruption of application functionality.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-25T17:30:15.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57169 vulnerable 2026-06-08 06:56:13.403194 Details available
A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to bypass upload restrictions and potentially achieve remote code execution by uploading malicious files.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-25T17:21:42.180Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.