Freesms
1 CVEs
product
Monthly
FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. [CVSS 8.2 HIGH]
PHP
SQLi
Authentication Bypass
Freesms
NVD
Exploit-DB
CVSS 3.1
8.2
EPSS
0.3%
CVE-2019-25506
EPSS 0%
CVSS 8.2
HIGH
POC
This Week
FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. [CVSS 8.2 HIGH]
PHP
SQLi
Authentication Bypass
+1
NVD
Exploit-DB