CVE-2025-56263

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

CVE-2025-56263: Unrestricted Upload of File with Dangerous Type

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

CVE-2025-56263

The by-night sms student grade management system (version 1.0 ) is vulnerable to an Arbitrary File Upload vulnerability via the /api/sms/upload/headImg endpoint. The root cause is that the application fails to restrict the type and size of files during the upload process, allowing users to upload...

PT-2014-4974

Name of the Vulnerable Software and Affected Versions Huawei E303 modems with software 22.157.18.00.858 Huawei Web UI version 11.010.06.01.858 Description A cross-site request forgery CSRF issue exists in the api/sms/send-sms endpoint of the Web UI, allowing remote attackers to hijack administrat...

CVE-2014-2946: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems with software 22.157.18.00.858 allows remote attackers to hijack the authentication of administrators for requests that perform API operations and send SMS messages via a request...