PL
Vendor
PlaySMS
14
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-8880 | PL Playsms Playsms | 9.8 | Sep 16 | playSMS Template index.php code injection |
| CVE-2024-6470 | PL Playsms Playsms | 2.7 | Jul 3 | playSMS Template injection |
| CVE-2024-6469 | PL Playsms Playsms | 8.8 | Jul 3 | playSMS Template injection |
| CVE-2024-6251 | PL Playsms Playsms | 6.1 | Jun 22 | playSMS New Phonebook cross site scripting |
| CVE-2022-47034 | PL Playsms Playsms | 9.8 | Feb 13 | A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication |
| CVE-2021-40373 | PL Playsms Playsms | 9.8 | Sep 10 | playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that code via the… |
| CVE-2020-15018 | PL Playsms Playsms | 6.5 | Jun 24 | playSMS through 1.4.3 is vulnerable to session fixation |
| CVE-2020-8644 In wildKEV | PL Playsms Playsms | 9.8 | Feb 5 | PlaySMS Server-Side Template Injection Vulnerability |
| CVE-2017-9101 | PL Playsms Playsms | 9.8 | May 21 | import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file |
| CVE-2017-9080 | PL Playsms Playsms | 8.8 | May 19 | PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed |
| CVE-2009-0103 | PL Playsms Playsms | – | Jan 9 | Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to… |
| CVE-2008-5881 | PL Playsms Playsms | – | Jan 9 | Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1)… |
| CVE-2005-4432 | PL Playsms Playsms | – | Dec 21 | Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter |
| CVE-2004-2263 | PL Playsms Playsms | – | Dec 31 | SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie |