CVE-2017-9101

Summary

import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.exploit-db.com/exploits/44598/
• https://www.exploit-db.com/exploits/42044/

References

• https://www.exploit-db.com/exploits/44598/
• https://www.exploit-db.com/exploits/42044/

• ←Previous
• Next→