Security Advisory

CVE-2017-9101

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-05-21 18:00:00
Last updated 2024-08-05 16:55:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.