VYPR

FreeSMS

by FreeSMS

CVEs (1)

  • CVE-2019-25506HigMar 4, 2026
    risk 0.53cvss 8.2epss 0.00

    FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. Attackers can exploit the vulnerable password parameter in requests…