Security Advisory

CVE-2017-9080

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-05-19 15:00:00
Last updated 2024-08-05 16:55:21
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection.