high7.2
CVE-2022-27349
Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php.
Impact
Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Socialcodia | Social Codia Sms | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/166655/Social-Codia-SMS-1-Shell-Upload.html
- https://drive.google.com/file/d/10vgciE0FwkZpzLZf9JSGGyvq3hwehXMs/view?usp=sharing
- https://github.com/D4rkP0w4r/sms-Unrestricted-File-Upload-RCE-POC
- http://packetstormsecurity.com/files/166655/Social-Codia-SMS-1-Shell-Upload.html
- https://drive.google.com/file/d/10vgciE0FwkZpzLZf9JSGGyvq3hwehXMs/view?usp=sharing
- https://github.com/D4rkP0w4r/sms-Unrestricted-File-Upload-RCE-POC