CVE-2020-8644
Kritik CISA KEV: Aktif İstismarTeknik Veri (Otomatik)
- CVSS Skoru
- 9.8
- EPSS
- 86.7%
- CWE
- CWE-94
- KEV Durumu
- Evet
Yayım tarihi: 5 Şubat 2020 · CISA KEV son iyileştirme tarihi: 3 Mayıs 2022
Etkilenen: playsms playsms
1.4.3 sürümünden önceki PlaySMS, kötü amaçlı bir dizeden girişleri temizlemez.
Orijinal açıklama (İngilizce)
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
Referanslar
- http://packetstormsecurity.com/files/157106/PlaySMS-index.php-Unauthenticated-Template-Injection-Code-Execution.html
- https://forum.playsms.org/t/playsms-1-4-3-has-been-released/2704
- https://playsms.org/2020/02/05/playsms-1-4-3-has-been-released/
- https://research.nccgroup.com/2020/02/11/technical-advisory-playsms-pre-authentication-remote-code-execution-cve-2020-8644/
- http://packetstormsecurity.com/files/157106/PlaySMS-index.php-Unauthenticated-Template-Injection-Code-Execution.html
- https://forum.playsms.org/t/playsms-1-4-3-has-been-released/2704
Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.