playSMS | web interface for SMS gateways | SMS library

by antonraharja PHP Version: Current License: GPL-3.0

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | playSMS Summary

playSMS is a PHP library typically used in Messaging, SMS, Ruby On Rails, Twilio applications. playSMS has no bugs, it has a Strong Copyleft License and it has low support. However playSMS has 9 vulnerabilities. You can download it from GitHub.

playSMS is a free and open source SMS management software, a web interface for SMS gateways and bulk SMS services.

Support

Quality

Security

License

Reuse

Support

playSMS has a low active ecosystem.

It has 546 star(s) with 392 fork(s). There are 92 watchers for this library.

It had no major release in the last 6 months.

There are 51 open issues and 320 have been closed. On average issues are closed in 225 days. There are 1 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of playSMS is current.

Quality

playSMS has 0 bugs and 0 code smells.

Security

playSMS has 9 vulnerability issues reported (2 critical, 5 high, 2 medium, 0 low).

playSMS code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

playSMS is licensed under the GPL-3.0 License. This license is Strong Copyleft.

Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

Reuse

playSMS releases are not available. You will need to build from source code and install.

Installation instructions are available. Examples and code snippets are not available.

playSMS saves you 19839 person hours of effort in developing the same functionality from scratch.

It has 39132 lines of code, 581 functions and 2476 files.

It has low code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of playSMS

Get all kandi verified functions for this library.

playSMS Key Features

No Key Features are available at this moment for playSMS.

playSMS Examples and Code Snippets

No Code Snippets are available at this moment for playSMS.

Community Discussions

Trending Discussions on playSMS

Playsms folders empty on Ubuntu

QUESTION

Playsms folders empty on Ubuntu

Asked 2017-Sep-07 at 12:36

I'm using playsms 1.4 with smstools v3.1.20 on Ubuntu 16.04 with apache2, php7. I can send messages from playsms, but "my sent messages" folder is always empty, even though messages are successfully sent.

I've set the directory permission like this:

chown www-data:www-data -R /var/spool/sms

and it looks like this: ls -ltrR /var/spool/sms

...

ANSWER

Answered 2017-Sep-07 at 12:36

I got it working by re-installing Ubuntu 16.04 server (this might or might not have been necessary, but I wanted to start fresh). Next I followed the instructions given here to install apache2, php7 and all the required modules, but i skipped installing Nginx because I don't need it.

I also skipped steps 5 and 6 because I don't use Nginx. After finishing those steps I installed smstools 3.1.21 following the instructions given here.

This got everything working like it should, folder are now populated with messages as expected.

Source https://stackoverflow.com/questions/46055469

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

CVE-2020-15018 MEDIUM

playSMS through 1.4.3 is vulnerable to session fixation.

https://github.com/antonraharja/playSMS/issues/605

CVE-2020-8644 CRITICAL

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

https://playsms.org/2020/02/05/playsms-1-4-3-has-been-released/

https://forum.playsms.org/t/playsms-1-4-3-has-been-released/2704

https://research.nccgroup.com/2020/02/11/technical-advisory-playsms-pre-authentication-remote-code-execution-cve-2020-8644/

http://packetstormsecurity.com/files/157106/PlaySMS-index.php-Unauthenticated-Template-Injection-Code-Execution.html

CVE-2018-18387 HIGH

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.

https://github.com/TheeBlind/CVE-2018-18387

CVE-2017-9080 HIGH

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection.

https://www.exploit-db.com/exploits/42003/

http://touhidshaikh.com/blog/poc/playsms-v1-4-rce/

https://www.exploit-db.com/exploits/44599/

CVE-2017-9101 CRITICAL

import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.

https://www.exploit-db.com/exploits/42044/

https://www.exploit-db.com/exploits/44598/

CVE-2009-0103 HIGH

Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to plugin/gateway/gnokii/init.php, the (2) apps_path[themes] parameter to plugin/themes/default/init.php, and the (3) apps_path[libs] parameter to lib/function.php.

http://www.securityfocus.com/bid/33138

http://secunia.com/advisories/33386

http://securityreason.com/securityalert/4888

https://www.exploit-db.com/exploits/7687

CVE-2008-5881 HIGH

Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) gateway_module parameter to plugin/gateway/gnokii/init.php and the (2) themes_module parameter to plugin/themes/default/init.php.

http://www.securityfocus.com/bid/33138

http://secunia.com/advisories/33386

http://securityreason.com/securityalert/4888

https://www.exploit-db.com/exploits/7687

CVE-2005-4432 MEDIUM

Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter.

http://secunia.com/advisories/18148

http://www.securityfocus.com/bid/15928

http://www.osvdb.org/21835

http://www.vupen.com/english/advisories/2006/0548

http://marc.info/?l=full-disclosure&m=113970096305873&w=2

http://marc.info/?l=full-disclosure&m=113478814326427&w=2

https://exchange.xforce.ibmcloud.com/vulnerabilities/23665

CVE-2004-2263 HIGH

SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie.

http://www.securiteam.com/unixfocus/5UP0F2ADPS.html

http://sourceforge.net/project/shownotes.php?release_id=254915

http://www.securityfocus.com/bid/10970

http://www.osvdb.org/8984

http://securitytracker.com/id?1010984

https://exchange.xforce.ibmcloud.com/vulnerabilities/17031

Install playSMS

Please read INSTALL and then FAQ.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: