Browse CVEs

CRITICAL 9.8 CVE-2024-8880 A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.… Playsms No fix yet Fix from $2,3002024-09-16 HIGH 8.8 CVE-2024-6469 A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the fi… Playsms No fix yet Fix from $1,9502024-07-03 MEDIUM 6.1 CVE-2024-6251 A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc… Playsms Mitigation only Fix from $1,6002024-06-22 CRITICAL 9.8 CVE-2022-47034 A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication. Playsms after 1.4.5 Fix from $2,3002023-02-13 CRITICAL 9.8 CVE-2021-40373 playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that … Playsms 1.4.5+ Fix from $2,3002021-09-10 MEDIUM 6.5 CVE-2020-15018 playSMS through 1.4.3 is vulnerable to session fixation. Playsms after 1.4.3 Fix from $1,6002020-06-24 CRITICAL 9.8 CVE-2020-8644 KEVEPSS 87% PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. Playsms 1.4.3+ Fix from $2,3002020-02-05 CRITICAL 9.8 CVE-2017-9101EPSS 77% import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP co… Playsms No fix yet Fix from $2,3002017-05-21 HIGH 8.8 CVE-2017-9080EPSS 62% PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unr… Playsms No fix yet Fix from $1,9502017-05-19 HIGH 7.5 CVE-2009-0103EPSS 10% Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_pa… Playsms No fix yet Fix from $1,9502009-01-09 HIGH 7.5 CVE-2008-5881EPSS 7% Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory trave… Playsms No fix yet Fix from $1,9502009-01-09 HIGH 7.5 CVE-2004-2263 SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the … Playsms Patch available Fix from $1,9502004-12-31