Lucene search

K

Sms Security Vulnerabilities

cve
cve

CVE-2022-39976

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at...

9.8CVSS

9.7AI Score

0.002EPSS

2022-10-27 08:15 PM
31
2
cve
cve

CVE-2005-2311

SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary...

6.8AI Score

0.0004EPSS

2022-10-03 04:22 PM
41
cve
cve

CVE-2022-38878

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-16 04:15 PM
24
3
cve
cve

CVE-2022-38832

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-16 03:15 PM
23
2
cve
cve

CVE-2022-38833

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-16 03:15 PM
25
2
cve
cve

CVE-2022-38267

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component...

7.2CVSS

7.2AI Score

0.001EPSS

2022-09-08 09:15 PM
36
7
cve
cve

CVE-2022-38268

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component...

7.2CVSS

7.2AI Score

0.001EPSS

2022-09-08 09:15 PM
33
8
cve
cve

CVE-2022-38269

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component...

7.2CVSS

7.2AI Score

0.001EPSS

2022-09-08 09:15 PM
30
6
cve
cve

CVE-2021-38357

The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the ~/sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including...

6.1CVSS

6AI Score

0.001EPSS

2021-09-10 02:15 PM
23
cve
cve

CVE-2015-4346

Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message...

5.8AI Score

0.002EPSS

2015-06-15 02:59 PM
18
cve
cve

CVE-2006-3349

Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in (1) cat.php and (2)...

8.9AI Score

0.002EPSS

2006-07-03 07:05 PM
24