CVE-2020-8644

PlaySMS Server-Side Template Injection Vulnerability

Playsms

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

5. Feb 2020

Ausgewertete Quellen

• Hersteller
  https://forum.playsms.org/t/playsms-1-4-3-has-been-released/2704
• Hersteller
  https://playsms.org/2020/02/05/playsms-1-4-3-has-been-released/
• Hinweis
  http://packetstormsecurity.com/files/157106/PlaySMS-index.php-Unauthenticated-Template-Injection-Code-Execution.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8644
• CISA
  PlaySMS Server-Side Template Injection Vulnerability
• NVD
  CVE-2020-8644