Skip to content
OpenAdvisories

Vendor

Freesms

1 known vulnerabilities.

Products

FreeSMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2019-25506

    FreeSMS 2.1.2 Authentication Bypass via SQL Injection

    FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. Attackers can exploit the vulnerable password p…

    Freesms FreeSMS