2020-01-09 21:28:37
mitre
PUBLISHED
SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.