CVE-2022-47034

PlaySMS

playSMS 安全漏洞

playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. A security vulnerability exists in playSMS v1.4.5 and earlier versions, which stems from a type confusion vulnerability in component /auth/fn.php that can be exploited by ...

CVE-2022-47034

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication...

CVE-2022-47034

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication...

PlaySMS < 1.4.3 RCE (CVE-2020-8644)

Binary data playsmscve-2020-8644.nbin...

PlaySMS Detection

Binary data playsmswebdetect.nbin...

The vulnerability of the TPL template implementation in the web interface for SMS gateways and PlaySMS’ SMS messaging services allows a perpetrator to execute arbitrary code.

The vulnerability of the TPL template implementation src/Playsms/Tpl.php:compile in the web interface for SMS gateways and PlaySMS’s SMS messaging services is related to insufficient cleaning of special string elements. Exploiting this vulnerability could allow an attacker operating remotely to...

PlaySMS index.php Remote Code Execution (CVE-2020-8644)

A remote code execution vulnerability exists in PlaySMS. Successful exploitation could allow a remote attacker to execute arbitrary code on the affected system...

VulnCheck KEV: CVE-2020-8644

PlaySMS contains a server-side template injection vulnerability that allows for remote code execution...

PlaySMS Server-Side Template Injection Vulnerability

PlaySMS contains a server-side template injection vulnerability that allows for remote code execution...

CVE-2021-40373

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the tabs-information-page of coremainconfig, and then executing that code via the index.php?app=main&inc=corewelcome URI...

CVE-2021-40373

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the tabs-information-page of coremainconfig, and then executing that code via the index.php?app=main&inc=corewelcome URI...

Code injection

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the tabs-information-page of coremainconfig, and then executing that code via the index.php?app=main&inc=corewelcome URI...

CVE-2021-40373

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the tabs-information-page of coremainconfig, and then executing that code via the index.php?app=main&inc=corewelcome URI...

CVE-2021-40373

PlaySMS prior to 1.4.5 is vulnerable to Arbitrary Code Execution via PHP in the #tabs-information-page of core_main_config, executable through index.php?app=main&inc=core_welcome. Affected versions:

playSMS代码注入漏洞

playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. A security vulnerability exists in playSMS versions prior to 1.4.5, which stems from allowing PHP code to be entered via the tabs message page of coremainconfig. This...

PT-2021-22882 · Playsms · Playsms

Name of the Vulnerable Software and Affected Versions: playSMS versions prior to 1.4.5 Description: The issue allows for Arbitrary Code Execution by entering PHP code at the tabs-information-page of core main config, and then executing that code via the "index.php?app=main&inc=core welcome" URI...

Exploit for Code Injection in Playsms

CVE-playsms There is a vulnerability in playsms 1.4.3 that a...

playSMS Authorization Issues Vulnerabilities

playSMS is an open source SMS Short Message Service management software from Anton Raharja Software Developers in India. A security vulnerability exists in playSMS version 1.4.3 and earlier. An attacker can exploit the vulnerability to set up a user's session and can take control of a user's...

CVE-2020-15018

playSMS through 1.4.3 is vulnerable to session fixation...