176 matches found
CVE-2022-47034
A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication...
CVE-2020-8644
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string...
CVE-2020-15018
playSMS through 1.4.3 is vulnerable to session fixation...
CVE-2024-8880
A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=coreauth&route=forgot&op=forgot of the component Template Handler. The manipulation of the argument username/email/captcha leads to...
CVE-2024-8880
Affects playSMS versions 1.4.4–1.4.7. The vulnerability exists in the Template Handler’s code path for the file /playsms/index.php?app=main&inc=core_auth&route=forgot&op=forgot, where manipulation of the arguments username/email/captcha leads to code injection. Impact is remote code execution wit...
CVE-2024-8880 playSMS Template index.php code injection
A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=coreauth&route=forgot&op=forgot of the component Template Handler. The manipulation of the argument username/email/captcha leads to...
CVE-2024-8880 playSMS Template index.php code injection
A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=coreauth&route=forgot&op=forgot of the component Template Handler. The manipulation of the argument username/email/captcha leads to...
CVE-2024-8880 playSMS Template index.php code injection
A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=coreauth&route=forgot&op=forgot of the component Template Handler. The manipulation of the argument username/email/captcha leads to...
playSMS 代码注入漏洞
playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. A code injection vulnerability exists in playSMS versions 1.4.4 through 1.4.7, which stems from the parameter username/email/captcha in the file...
PT-2024-39297 · Playsms · Playsms
Name of the Vulnerable Software and Affected Versions: playSMS versions 1.4.4 through 1.4.7 Description: A critical vulnerability has been found in playSMS, affecting an unknown function of the file /playsms/index.php?app=main&inc=core auth&route=forgot&op=forgot of the component Template Handler...
CVE-2024-6470
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...
CVE-2024-6470 playSMS Template injection
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...
CVE-2024-6470 playSMS Template injection
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...
CVE-2024-6470
CVE-2024-6470 affects playSMS 1.4.3 in the Template Handler, specifically the /index.php?app=main&inc=feature_inboxgroup&op=list endpoint. The vulnerability arises from injection via the id argument (also described as manipulation of Receiver Number/id in the Template Handler’s list functionality...
CVE-2024-6470 playSMS Template injection
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...
CVE-2024-6469
A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=featurefirewall&op=firewalllist of the component Template Handler. The manipulation of the argument IP address with the...
CVE-2024-6469 playSMS Template injection
A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=featurefirewall&op=firewalllist of the component Template Handler. The manipulation of the argument IP address with the...
CVE-2024-6469 playSMS Template injection
A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=featurefirewall&op=firewalllist of the component Template Handler. The manipulation of the argument IP address with the...
CVE-2024-6469 playSMS Template injection
A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=featurefirewall&op=firewalllist of the component Template Handler. The manipulation of the argument IP address with the...
CVE-2024-6469
CVE-2024-6469 affects playSMS 1.4.3 in the Template Handler’s Firewall List function (endpoint: /index.php?app=main&inc=feature_firewall&op=firewall_list). The issue is an injection triggered by manipulating the id argument ({{id}}) and can be exploited remotely; the exploit has been disclosed pu...