Unrated

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that c...

CVE-2021-40373 First seen on SecPulse Sep 10, 2021

Original description The description as published by the source.

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that code via the index.php?app=main&inc=core_welcome URI.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory playsms.org
report github.com

Key facts

Severity: Unrated
Published: Sep 10, 2021
First seen on SecPulse: Sep 10, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:53