Exploitation Summary
EIP tracks 3 public exploits for CVE-2017-9080.
PoCs published by Metasploit, Touhid M.Shaikh, including Metasploit module exploits/multi/http/playsms_filename_exec.
AI-analyzed exploit summary This Metasploit module exploits an authenticated file upload vulnerability in PlaySMS 1.4, where improper handling of the filename field in sendfromfile.php allows code execution. The exploit uploads a malicious file with a PHP payload embedded in the filename, which is then executed via the User-Agent header.
Description
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection.
Exploits (3)
This Metasploit module exploits an authenticated file upload vulnerability in PlaySMS 1.4, where improper handling of the filename field in sendfromfile.php allows code execution. The exploit uploads a malicious file with a PHP payload embedded in the filename, which is then executed via the User-Agent header.
The exploit describes an unrestricted file upload vulnerability in PlaySMS 1.4, where a user can upload a malicious PHP file with a crafted filename containing PHP code. The server processes the filename without proper validation, leading to potential code execution when the filename is displayed on the page.
This Metasploit module exploits a code injection vulnerability in PlaySMS v1.4 by uploading a file with a malicious filename, leading to remote code execution. It requires authentication and leverages CSRF tokens for session management.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H