playSMS Injection Vulnerability

playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. An injection vulnerability exists in playSMS version 1.4.3, which stems from an issue in the /index.php?app=main&inc=featureinboxgroup&op=list file of the Template Handler...

PT-2024-37650 · Playsms · Playsms

Name of the Vulnerable Software and Affected Versions: playSMS version 1.4.3 Description: A vulnerability was found in the Template Handler component, specifically in the file /index.php?app=main&inc=feature firewall&op=firewall list. The manipulation of the id argument leads to injection. The...

playSMS Injection Vulnerability

playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. An injection vulnerability exists in playSMS version 1.4.3, which stems from an issue in the /index.php?app=main&inc=featurefirewall&op=firewalllist file of the Template...

PT-2024-37651 · Playsms · Playsms

Name of the Vulnerable Software and Affected Versions: playSMS version 1.4.3 Description: A vulnerability was found in the Template Handler component of playSMS, affecting some unknown functionality of the file /index.php?app=main&inc=feature inboxgroup&op=list. The manipulation of the id argumen...

CVE-2024-6251

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...

CVE-2024-6251 playSMS New Phonebook cross site scripting

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...

CVE-2024-6251 playSMS New Phonebook cross site scripting

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...

CVE-2024-6251

playSMS 1.4.3 is affected in the New Phonebook Handler component, specifically the file /index.php?app=main&inc=feature_phonebook&op=phonebook_list. The vulnerability is triggered by tampering with the name or email parameter, causing basic cross-site scripting (XSS). Exploitation can be carried ...

CVE-2024-6251 playSMS New Phonebook cross site scripting

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...

playSMS Security Vulnerabilities

playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. A security vulnerability exists in playSMS version 1.4.3, which stems from the manipulation of the name/email parameter that can lead to cross-site scripting XSS attacks...

PT-2024-37483 · Playsms · Playsms

Name of the Vulnerable Software and Affected Versions: playSMS version 1.4.3 Description: A vulnerability was found in the New Phonebook Handler component, affecting an unknown function of the file "/index.php?app=main&inc=feature phonebook&op=phonebook list". The manipulation of the name or emai...

CVE-2024-5851

A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the file /index.php?app=main&inc=featureschedule&op=list of the component SMS Schedule Handler. The manipulation of the argument name/message leads to basic cross site scripting. It...

CVE-2024-5851 playSMS SMS Schedule cross site scripting

A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the file /index.php?app=main&inc=featureschedule&op=list of the component SMS Schedule Handler. The manipulation of the argument name/message leads to basic cross site scripting. It...

CVE-2024-5851 playSMS SMS Schedule cross site scripting

A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the file /index.php?app=main&inc=featureschedule&op=list of the component SMS Schedule Handler. The manipulation of the argument name/message leads to basic cross site scripting. It...

CVE-2024-5851

CVE-2024-5851 affects playSMS up to version 1.4.7. The vulnerability lies in an unknown function within the SMS Schedule Handler (file path: /index.php?app=main&inc=feature_schedule&op=list), where manipulation of the name/message parameters enables a basic cross-site scripting (XSS) vulnerabilit...

CVE-2024-5851 playSMS SMS Schedule cross site scripting

A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the file /index.php?app=main&inc=featureschedule&op=list of the component SMS Schedule Handler. The manipulation of the argument name/message leads to basic cross site scripting. It...

playSMS Security Vulnerabilities

playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. A security vulnerability exists in playSMS 1.4.7 and earlier versions, which stems from the fact that manipulation of the parameters name/message can lead to basic...

CVE-2022-47034

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication...

Authentication flaw

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication...

CVE-2022-47034

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication...