CVE-2024-8880

all versions

A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the f

5.6MEDIUM

CVE-2024-6470

all versions

A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality

2.7LOW

CVE-2024-6469

all versions

A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown func

2.7LOW

CVE-2024-6251

all versions

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /ind

2.4LOW

CVE-2022-47034

<= 1.4.5

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authenticatio

9.8CRITICAL

CVE-2021-40373

< 1.4.5

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and t

9.8CRITICAL

CVE-2020-15018

<= 1.4.3

playSMS through 1.4.3 is vulnerable to session fixation.

6.5MEDIUM

CVE-2020-8644

< 1.4.3

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

9.8CRITICAL

CVE-2018-18387

<= 1.4.2

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.

8.8HIGH

CVE-2017-9101

all versions

import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTT

9.8CRITICAL

CVE-2017-9080

all versions

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a

8.8HIGH

CVE-2009-0103

all versions

Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL

CVE-2008-5881

all versions

Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files

CVE-2005-4432

all versions

Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTM

CVE-2004-2263

all versions

SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL