CVE-2024-6470

Summary

CVE-2024-6470 is a newly disclosed vulnerability affecting playSMS 1.4.3. This issue, rated as problematic, impacts an unspecified functionality within the file /index.php?app=main&inc=feature_inboxgroup&op=list of the Template Handler component. The manipulation of the argument Receiver Number using the input {{`id`}} can result in injection attacks. These attacks can be executed remotely, and the exploit is publicly disclosed. Vendor contact regarding this disclosure did not result in any response. (VDB-270278)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.