playSMS 1.4.3
Approved changes feed: RSS · Atom
cpe:2.3:a:playsms:playsms:1.4.3:*:*:*:*:*:*:*part: a version: 1.4.3 update: *
| Vendor | Playsms (c33c58f9-6200-5f74-83e4-97d71fb39b56) |
|---|---|
| Product | Playsms (cfc14c45-8b33-5edc-9dd4-b42789ec41d1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/playsms/playsms |
purl2cpe | 2026-06-01 10:13:31.446505 |
pkg:github/playsms/playsms |
purl2cpe | 2026-06-01 10:13:31.446506 |
pkg:sourceforge/playsms |
purl2cpe | 2026-06-01 10:13:31.446507 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6470 |
vulnerable | 2026-06-08 06:58:19.541687 |
playSMS Template injection
LOW (2.7)
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=feature_inboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input {{`id`}} leads to injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-270278 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-03T12:31:03.496Z
Updated: 2024-08-01T21:41:03.407Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6469 |
vulnerable | 2026-06-08 06:58:19.541205 |
playSMS Template injection
LOW (2.7)
A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=feature_firewall&op=firewall_list of the component Template Handler. The manipulation of the argument IP address with the input {{`id`} leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-270277 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-03T10:31:03.590Z
Updated: 2024-08-01T21:41:03.421Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6251 |
vulnerable | 2026-06-08 06:58:18.397419 |
playSMS New Phonebook cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=feature_phonebook&op=phonebook_list of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-269418 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-22T11:31:03.392Z
Updated: 2024-08-01T21:33:05.179Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.