CVE-2017-9080

Published: 2017-05-19T15:29Z

Last Modified: 2024-11-21T03:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt