180 matches found
playSMS代码注入漏洞
playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. A security vulnerability exists in playSMS versions prior to 1.4.5, which stems from allowing PHP code to be entered via the tabs message page of coremainconfig. This...
Exploit for Code Injection in Playsms
CVE-playsms There is a vulnerability in playsms 1.4.3 that a...
playSMS Authorization Issues Vulnerabilities
playSMS is an open source SMS Short Message Service management software from Anton Raharja Software Developers in India. A security vulnerability exists in playSMS version 1.4.3 and earlier. An attacker can exploit the vulnerability to set up a user's session and can take control of a user's...
CVE-2020-15018
playSMS through 1.4.3 is vulnerable to session fixation...
CVE-2020-15018
playSMS through 1.4.3 is vulnerable to session fixation...
CVE-2020-15018
playSMS through 1.4.3 is vulnerable to session fixation...
Session fixation
playSMS through 1.4.3 is vulnerable to session fixation...
CVE-2020-15018
CVE-2020-15018 affects playSMS up to version 1.4.3 and is described as vulnerable to session fixation. Connected sources indicate an attacker could leverage this issue to establish or hijack a user session and take control of a user’s account, implying impact to authentication/session integrity. ...
CVE-2020-15018
playSMS through 1.4.3 is vulnerable to session fixation...
PlaySMS - index.php Unauthenticated Template Injection Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PlaySMS index.php Unauthenticated Template Injection Code Execution', 'Description' = %q This module exploits a preauth Server-Side Template...
PlaySMS Unauthenticated Template Injection Code Execution Exploit
This Metasploit module exploits a preauth Server-Side Template Injection vulnerability that leads to remote code execution in PlaySMS before version 1.4.3. This issue is caused by double processing a server-side template with a custom PHP template system called TPL which is used in the PlaySMS...
PlaySMS index.php Unauthenticated Template Injection Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PlaySMS index.php Unauthenticated Template Injection Code Execution', 'Description' = %q This module exploits a preauth Server-Side Template...
PlaySMS 1.4.3 - Template Injection / Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PlaySMS 1.4.3 Pre Auth Template Injection Remote Code Execution', 'Description' = %q This module exploits a Preauth Server-Side Template Injectio...
Unspecified Vulnerability in PlaySMS
PlaySMS is a web-based SMS platform. The platform supports connectivity to SMS gateways, personal messaging systems, and corporate group communication tools. A security vulnerability exists in PlaySMS. The vulnerability stems from a web-based system or product that does not properly validate...
CVE-2020-8644
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string...
CVE-2020-8644
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string...
Design/Logic Flaw
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string...
CVE-2020-8644
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string...
CVE-2020-8644
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string...
CVE-2020-8644
CVE-2020-8644 affects PlaySMS pre-1.4.3, where a server-side template injection leads to remote code execution. The root cause is double processing of a server-side template (TPL) in the PlaySMS template engine, enabling arbitrary code execution via unauthenticated input. Affected version: before...