CVE-2024-6469 - playSMS Template injection

Back Back to CVE browser

MEDIUM

playSMS Template injection

Published Jul 3, 2024

5.1

MEDIUM

CVSS 4.0

EPSS 0.74%

Description

A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=feature_firewall&op=firewall_list of the component Template Handler. The manipulation of the argument IP address with the input {{`id`} leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-270277 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor n/a Product playSMS Default
n/a
- Version
  1.4.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

playSMS

n/a

Version	Status	Constraints
1.4.3	affected	-

Vendor Playsms Product Playsms Default
n/a
- Version
  1.4.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Playsms

n/a

Version	Status	Constraints
1.4.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47562
Advisory
https://vuldb.com/?ctiid.270277
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.270277
vdb-entrytechnical-descriptionPermissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.363730
third-party-advisoryExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47562		Advisory
https://vuldb.com/?ctiid.270277		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.270277		vdb-entrytechnical-descriptionPermissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.363730		third-party-advisoryExploitThird Party AdvisoryVDB Entry