CVE-2017-9101
NONE EPSS 99.5%
Published May 21, 20179y ago · Modified Jun 17, 20262w ago
Published May 21, 2017 9y ago
Last Modified Jun 17, 2026 2w ago
Description
import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.
Threat Intelligence
EPSS Exploit Probability
99.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-434 Unrestricted Upload of File with Dangerous Type Resource Mgmt
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| playsms | playsms | 1.4 | any |
References 2
- exploit-db.com https://www.exploit-db.com/exploits/42044/
- exploit-db.com https://www.exploit-db.com/exploits/44598/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.