CVE-2004-2263

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie.

Affected products

playSMS: 0.6, 0.7

References

http://securitytracker.com/id?1010984
http://sourceforge.net/project/shownotes.php?release_id=254915
http://www.osvdb.org/8984
http://www.securiteam.com/unixfocus/5UP0F2ADPS.html
http://www.securityfocus.com/bid/10970
https://exchange.xforce.ibmcloud.com/vulnerabilities/17031
http://securitytracker.com/id?1010984
http://sourceforge.net/project/shownotes.php?release_id=254915
http://www.osvdb.org/8984
http://www.securiteam.com/unixfocus/5UP0F2ADPS.html
http://www.securityfocus.com/bid/10970
https://exchange.xforce.ibmcloud.com/vulnerabilities/17031

Get alerted when CVE-2004-2263 or the next vulnerability affects your stack