NVD

Id
86204  
Name
CVE-2017-9080  
Description
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-03  
Published
2017-05-19  
Modified Date
2017-06-01  
Seq
2017-9080  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419114 86204 CVE-2017-7192 http://seclists.org/bugtraq/2017/Apr/66  View
419115 86204 CVE-2017-7192 https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6  View
419116 86204 CVE-2017-7192 https://github.com/daltoniam/Starscream/releases/tag/2.0.4  View
419117 86204 CVE-2017-7192 http://seclists.org/bugtraq/2017/Apr/66  View
419118 86204 CVE-2017-7192 https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6  View
419119 86204 CVE-2017-7192 https://github.com/daltoniam/Starscream/releases/tag/2.0.4  View
422910 86204 CVE-2017-0633 98223  View
422911 86204 CVE-2017-0633 https://source.android.com/security/bulletin/2017-05-01  View
422912 86204 CVE-2017-0633 98223  View
422913 86204 CVE-2017-0633 https://source.android.com/security/bulletin/2017-05-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68009 JVNDB-2017-004291 PlaySMS における危険なタイプのファイルの無制限アップロードに関する脆弱性 PlaySMS には、危険なタイプのファイルの無制限アップロードに関する脆弱性が存在します。 CVE-2017-9080 0 CVE-2017-9080 86204 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004291.html 2017-05-17 2017-06-21 View