Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Playsms CRITICAL 9.8
CVE-2024-8880

A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.…

No fix yet
Fix from $2,300 2024-09-16
Playsms HIGH 8.8
CVE-2024-6469

A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the fi…

No fix yet
Fix from $1,950 2024-07-03
Playsms MEDIUM 6.1
CVE-2024-6251

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc…

Mitigation only
Fix from $1,600 2024-06-22
Playsms CRITICAL 9.8
CVE-2022-47034

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.

Fix: after 1.4.5
Fix from $2,300 2023-02-13
Playsms CRITICAL 9.8
CVE-2021-40373

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that …

Fix: 1.4.5+
Fix from $2,300 2021-09-10
Playsms MEDIUM 6.5
CVE-2020-15018

playSMS through 1.4.3 is vulnerable to session fixation.

Fix: after 1.4.3
Fix from $1,600 2020-06-24
Playsms CRITICAL 9.8
CVE-2020-8644 KEVEPSS 87%

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

Fix: 1.4.3+
Fix from $2,300 2020-02-05
Playsms CRITICAL 9.8
CVE-2017-9101EPSS 77%

import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP co…

No fix yet
Fix from $2,300 2017-05-21
Playsms HIGH 8.8
CVE-2017-9080EPSS 62%

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unr…

No fix yet
Fix from $1,950 2017-05-19
Playsms HIGH 7.5
CVE-2009-0103EPSS 10%

Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_pa…

No fix yet
Fix from $1,950 2009-01-09
Playsms HIGH 7.5
CVE-2008-5881EPSS 7%

Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory trave…

No fix yet
Fix from $1,950 2009-01-09
Playsms HIGH 7.5
CVE-2004-2263

SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the …

Patch available
Fix from $1,950 2004-12-31