176 matches found
PlaySms 0.9.9.2 - Cross-Site Request Forgery
Exploit Title : PlaySMS input type=hidden size=10 maxlength=10 name=upzipcode...
PlaySMS 0.9.9.2 Cross Site Request Forgery
Exploit Title : PlaySMS...
PlaySMS 'apps_path[themes]' Parameter Multiple Remote File Include Vulnerabilities
PlaySMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to execute arbitrary script code in the context of the webserver...
PlaySMS 'apps_path[themes]' Parameter Multiple Remote File Include Vulnerabilities
PlaySMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
PlaySMS 0.9.5.2 Remote File Inclusion
============================================================================================================= o PlaySMS affected all this files web/plugin/themes/default/pageforgot.php web/plugin/themes/default/pagelogin.php web/plugin/themes/default/pagenoaccess.php...
PlaySms 0.9.5.2 - Remote File Inclusion
PlaySms 0.9.5.2 - Remote File Inclusion ============================================================================================================= o PlaySMS affected all this files web/plugin/themes/default/pageforgot.php web/plugin/themes/default/pagelogin.php...
PlaySms 0.9.5.2 - Remote File Inclusion
============================================================================================================= o PlaySMS affected all this files web/plugin/themes/default/pageforgot.php web/plugin/themes/default/pagelogin.php web/plugin/themes/default/pagenoaccess.php...
PlaySMS 0.9.5.2 <= Remote File Inclusion Vulnerability
Exploit for php platform in category web applications...
CVE-2009-0103
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 appspathplug parameter to plugin/gateway/gnokii/init.php, the 2 appspaththemes parameter to plugin/themes/default/init.php, and the 3 appspathlibs parameter ...
Directory traversal
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 appspathplug parameter to plugin/gateway/gnokii/init.php, the 2 appspaththemes parameter to plugin/themes/default/init.php, and the 3 appspathlibs parameter ...
CVE-2008-5881
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...
CVE-2008-5881
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...
CVE-2009-0103
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 appspathplug parameter to plugin/gateway/gnokii/init.php, the 2 appspaththemes parameter to plugin/themes/default/init.php, and the 3 appspathlibs parameter ...
CVE-2009-0103
CVE-2009-0103 describes multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3. The weakness allows remote attackers to execute arbitrary PHP code by supplying a crafted URL through one of three parameters: apps_path[plug] to plugin/gateway/gnokii/init.php, apps_path[themes] to plugi...
CVE-2008-5881
CVE-2008-5881 describes multiple directory traversal vulnerabilities in playSMS 0.9.3 . Remote attackers can cause the application to include and execute arbitrary local files via directory traversal sequences in the parameters: (1) gateway_module to plugin/gateway/gnokii/init.php and (2) themes_...
playSMS 0.9.3 Remote And Local File Inclusion Vulnerabilities
==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...
playSMS 0.9.3 Multiple Remote/Local File Inclusion Vulnerabilities
No description provided by source. ==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...
PlaySms 0.9.3 - Multiple LocalRemote File Inclusions
PlaySms 0.9.3 - Multiple LocalRemote File Inclusions ==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...
playSMS 0.9.3 Multiple Remote/Local File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== playSMS 0.9.3 Multiple Remote/Local File Inclusion Vulnerabilities ================================================================== ==:RFI/LFI:== =====================...