Login Request a demo
PL
Product
PlaySMS
by PlaySMS · last CVE Sep 16, 2024
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 5High 2Medium 2Low 1
Severity
All severities14Critical5High2Medium2Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add PlaySMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-8644
In wildKEV
9.8
87%
Feb 5
PlaySMS Server-Side Template Injection Vulnerability
Affected: before 1.4.3
CVE-2024-8880
9.8
1%
Sep 16
playSMS Template index.php code injection
Affected: 1.4.4; 1.4.5; 1.4.6; 1.4.7
CVE-2022-47034
9.8
1%
Feb 13
A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication
Affected: through 1.4.5
CVE-2021-40373
9.8
5%
Sep 10
playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that code via the…
Affected: before 1.4.5
CVE-2017-9101
9.8
77%
May 21
import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file
Affected: 1.4
CVE-2024-6469
8.8
1%
Jul 3
playSMS Template injection
Affected: 1.4.3
CVE-2017-9080
8.8
62%
May 19
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed
Affected: 1.4
CVE-2020-15018
6.5
1%
Jun 24
playSMS through 1.4.3 is vulnerable to session fixation
Affected: through 1.4.3
CVE-2024-6251
6.1
0%
Jun 22
playSMS New Phonebook cross site scripting
Affected: 1.4.3
CVE-2024-6470
2.7
0%
Jul 3
playSMS Template injection
Affected: 1.4.3
CVE-2009-0103
–
10%
Jan 9
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to…
Affected: 0.9.3
CVE-2008-5881
–
7%
Jan 9
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1)…
Affected: 0.9.3
CVE-2005-4432
–
2%
Dec 21
Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter
Affected: 0.8
CVE-2004-2263
–
1%
Dec 31
SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie
Affected: 0.6; 0.7
Showing 14