CVE-2017-9101 : import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code

import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.

Published 2017-05-21 18:29:00

Updated 2018-05-11 01:29:05

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2017-9101

Playsms » Playsms » Version: 1.4
cpe:2.3:a:playsms:playsms:1.4:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-9101

EPSS FAQ

90.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2017-9101

PlaySMS import.php Authenticated CSV File Upload Code Execution

Disclosure Date: 2017-05-21

First seen: 2020-04-26

exploit/multi/http/playsms_uploadcsv_exec

This module exploits an authenticated file upload remote code excution vulnerability in PlaySMS Version 1.4. This issue is caused by improper file contents handling in import.php (aka the Phonebook import feature). Authenticated Users can upload a CSV file co

More information

CVSS scores for CVE-2017-9101

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-9101

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-9101

https://www.exploit-db.com/exploits/44598/

PlaySMS - 'import.php' (Authenticated) CSV File Upload Code Execution (Metasploit)
https://www.exploit-db.com/exploits/42044/

PlaySMS 1.4 - 'import.php' Remote Code Execution
Exploit;Third Party Advisory;VDB Entry

Jump to