Vulnerabilities > Playsms
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-01-09 | CVE-2008-5881 | Path Traversal vulnerability in Playsms 0.9.3 Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) gateway_module parameter to plugin/gateway/gnokii/init.php and the (2) themes_module parameter to plugin/themes/default/init.php. | 7.5 |
| 2005-12-21 | CVE-2005-4432 | Cross-Site Scripting vulnerability in Playsms 0.8 Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter. network playsms | 4.3 |
| 2004-12-31 | CVE-2004-2263 | SQL Injection vulnerability in Anton Raharja PlaySMS Valid Function SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie. | 7.5 |