CVE-2014-8677

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a…

published August 31, 2017

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and smarty/templates_c is not writable to execute arbitrary php code via a crafted database name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03488 · 89.0th percentile
Published
2017-08-31T22:00Z
EPSS history
Timeline
  • 31 AUG 22:00Z
    The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a…
    cvelistv5