Skip to content
Pwn everything Bounce everywhere all at once (part 2)
blog.quarkslab.com | research | #rce | #php | #sql-injection | #vulnerability | #pentest | #soplanning
Summary
Part two of Quarkslab's watering-hole series: five chained flaws in SOPlanning 1.52.02 (pre-auth SQLi, auth bypass, file delete/upload, ZipArchive race) yield unauthenticated RCE.
- Published
- Collected