CVE-2009-0103
NONE EPSS 95.1%
Published Jan 9, 200917y ago · Modified Jun 16, 20262w ago
Published Jan 9, 2009 17y ago
Last Modified Jun 16, 2026 2w ago
Description
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to plugin/gateway/gnokii/init.php, the (2) apps_path[themes] parameter to plugin/themes/default/init.php, and the (3) apps_path[libs] parameter to lib/function.php.
Threat Intelligence
EPSS Exploit Probability
95.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-94 Improper Control of Generation of Code (Code Injection) Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| playsms | playsms | 0.9.3 | any |
References 4
- secunia.com http://secunia.com/advisories/33386
- securityreason.com http://securityreason.com/securityalert/4888
- securityfocus.com http://www.securityfocus.com/bid/33138
- exploit-db.com https://www.exploit-db.com/exploits/7687
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.