All packages
PlaySMS 1.4 vulnerabilities
3 known CVE vulnerabilities in PlaySMS 1.4, translated and rated.
- CVE-2017-9080High
PlaySMS version 1.4 allows remote code execution due to the execution of PHP code in the name of an uploaded .php file. The issue arises from a combination of unrestricted file upload and code injection.
- CVE-2020-8644CriticalActively exploited
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
- CVE-2017-9101Critical
In PlaySMS 1.4, the import feature (import.php) allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.