180 matches found
PlaySMS Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15928/info PlaySmS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
PlaySMS SMS Gateway跨站请求伪造漏
Playsms是开源SMS管理系统。 PlaySMS SMS Gateway 0.9.9.2及其他版本没有正确验证用户的HTTP请求，在实现上存在安全漏洞，成功利用后可使攻击者更改管理员密码。 0 PlaySMS SMS Gateway 0.9.9.2 PlaySMS ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://playsms.sourceforge.net/ http://security-geeks.blogspot.dk/2013/12/playsms-0992-csrf.html...
PlaySMS <= 0.9.9.2 - CSRF Vulnerability
Exploit for php platform in category web applications Playsms is an open source SMS managment system , suffers from Cross-site request forgery through which attacker can manipulate user data via sending him malicious craft url. Playsms is not using any security token to prevent it against CSRF.Yo...
PlaySms 0.9.9.2 - Cross-Site Request Forgery
PlaySms 0.9.9.2 - Cross-Site Request Forgery Exploit Title : PlaySMS input type=hidden size=10 maxlength=10 name=up...
PlaySms 0.9.9.2 - Cross-Site Request Forgery
Exploit Title : PlaySMS input type=submit class=button va...
PlaySMS 0.9.9.2 Cross Site Request Forgery
Exploit Title : PlaySMS...
PlaySMS 'apps_path[themes]' Parameter Multiple Remote File Include Vulnerabilities
PlaySMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to execute arbitrary script code in the context of the webserver...
PlaySMS 'apps_path[themes]' Parameter Multiple Remote File Include Vulnerabilities
PlaySMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
PlaySMS 0.9.5.2 Remote File Inclusion
============================================================================================================= o PlaySMS affected all this files web/plugin/themes/default/pageforgot.php web/plugin/themes/default/pagelogin.php web/plugin/themes/default/pagenoaccess.php...
PlaySms 0.9.5.2 - Remote File Inclusion
PlaySms 0.9.5.2 - Remote File Inclusion ============================================================================================================= o PlaySMS affected all this files web/plugin/themes/default/pageforgot.php web/plugin/themes/default/pagelogin.php...
PlaySms 0.9.5.2 - Remote File Inclusion
============================================================================================================= o PlaySMS affected all this files web/plugin/themes/default/pageforgot.php web/plugin/themes/default/pagelogin.php web/plugin/themes/default/pagenoaccess.php...
PlaySMS 0.9.5.2 <= Remote File Inclusion Vulnerability
Exploit for php platform in category web applications...
CVE-2009-0103
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 appspathplug parameter to plugin/gateway/gnokii/init.php, the 2 appspaththemes parameter to plugin/themes/default/init.php, and the 3 appspathlibs parameter ...
Directory traversal
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 appspathplug parameter to plugin/gateway/gnokii/init.php, the 2 appspaththemes parameter to plugin/themes/default/init.php, and the 3 appspathlibs parameter ...
CVE-2008-5881
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...
CVE-2009-0103
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 appspathplug parameter to plugin/gateway/gnokii/init.php, the 2 appspaththemes parameter to plugin/themes/default/init.php, and the 3 appspathlibs parameter ...
CVE-2008-5881
CVE-2008-5881 describes multiple directory traversal vulnerabilities in playSMS 0.9.3 . Remote attackers can cause the application to include and execute arbitrary local files via directory traversal sequences in the parameters: (1) gateway_module to plugin/gateway/gnokii/init.php and (2) themes_...
CVE-2008-5881
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...
CVE-2009-0103
CVE-2009-0103 describes multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3. The weakness allows remote attackers to execute arbitrary PHP code by supplying a crafted URL through one of three parameters: apps_path[plug] to plugin/gateway/gnokii/init.php, apps_path[themes] to plugi...