Lucene search

K
osvGoogleOSV:CVE-2021-40373
HistorySep 10, 2021 - 2:15 p.m.

CVE-2021-40373

2021-09-1014:15:12
Google
osv.dev
7
playsms
arbitrary code execution
php code
core_main_config
index.php
security vulnerability

AI Score

7.5

Confidence

High

EPSS

0.037

Percentile

92.0%

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that code via the index.php?app=main&inc=core_welcome URI.

AI Score

7.5

Confidence

High

EPSS

0.037

Percentile

92.0%

Related for OSV:CVE-2021-40373