Read the docs

Freesms Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Freesms Project records in CISA KEV

No Freesms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Freesms 1 record HIGH

Records

1 record in Freesms · all components

TI-2019-15559 CVE-2019-25506 · GHSA-j4rv-c327-frjj

FreeSMS 2.1.2 Authentication Bypass via SQL Injection

Priority HIGH 77

FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00516 Published 2026-03-04 No fix listed CWE-89
Open these records in search →