cbcvebase.

Freesms Project Freesms vulnerabilities

1 known vulnerability affecting freesms_project/freesms.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2019-25506P2CRITICALCVSS 9.8≤ 2.1.22026-03-04
CVE-2019-25506 [CRITICAL] CWE-89 CVE-2019-25506: FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter t FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. Attackers can exploit the vulnerable password parameter in requests to /pages/crc_handler.php?method=login to authenticate as any known us
nvd
Freesms Project Freesms vulnerabilities | cvebase