← Database

CVE-2024-57169

CRITICAL CVSS: 9.8 Published: 2025-03-18 Modified: 2026-06-17

Description

A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to bypass upload restrictions and potentially achieve remote code execution by uploading malicious files.

Affected Platforms

Soplanning Soplanning

Weakness Type

CWE-434

References