CVE-2014-8676: Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows r...

Security readout for executives and security teams

CVE-2014-8676 is a directory traversal flaw in SOPlanning 1.32 and earlier. A remote attacker may be able to test whether arbitrary files exist on the server. The source bundle does not show confirmed data theft, code execution, active exploitation, or a named patch. Exposure is most likely for organizations running SOPlanning 1.32 or earlier, especially if reachable by untrusted or internet users. The affected-product table is incomplete, but the CVE description names SOPlanning and version scope. Treat this as a targeted cleanup item, not an emergency based on current evidence. Prioritize internet-facing SOPlanning instances because public exploit references exist and the issue can expose sensitive server file existence information. Mitigation focus: Inventory SOPlanning deployments and identify versions 1.32 or earlier.; Check SOPlanning vendor or project guidance for fixed versions or official remediation.; Restrict public access until remediation is confirmed..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.