Login Request a demo
PL
Product
PlaySMS
by PlaySMS · last CVE Sep 16, 2024
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 5High 2Medium 2Low 1
Severity
All severities14Critical5High2Medium2Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add PlaySMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-8644
In wildKEV
9.8
87%
Feb 5
PlaySMS Server-Side Template Injection Vulnerability
Affected: before 1.4.3
CVE-2024-8880
9.8
1%
Sep 16
playSMS Template index.php code injection
Affected: 1.4.4; 1.4.5; 1.4.6; 1.4.7
CVE-2022-47034
9.8
1%
Feb 13
A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication
Affected: through 1.4.5
CVE-2021-40373
9.8
5%
Sep 10
playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that code via the…
Affected: before 1.4.5
CVE-2017-9101
9.8
77%
May 21
import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file
Affected: 1.4
Showing 5