| Package | Affected versions | Patched versions |
|---|---|---|
| playsms | = 0.9.3 |
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to plugin/gateway/gnokii/init.php, the (2) apps_path[themes] parameter to plugin/themes/default/init.php, and the (3) apps_path[libs] parameter to lib/function.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free