CVE-2024-33722 identifies an SQL Injection vulnerability in SOPlanning 1.52.00. The issue arises from insufficient input validation of the 'statut[]' parameter in the projets.php file, which can be exploited by an authenticated user to inject malicious SQL commands. The vulnerability is published but lacks a CVSS score and vendor remediation details. No cloud service is involved, and no exploits have been reported.

An authenticated attacker could exploit this vulnerability to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data disclosure, data modification, or other impacts depending on the database privileges of the application. However, the exact impact depends on the application's database configuration and user privileges. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to authenticated users with minimal privileges and monitor for suspicious activity related to the 'statut[]' parameter. Avoid exposing the vulnerable endpoint to untrusted users.