CVE-2010-0616

EvalSMSI 2.1.03 stores passwords in cleartext in the database, enabling privilege escalation for DB-authenticated attackers; remote vector is possible via a separate SQL injection vulnerability. Affected component: evalSMSI (2.1.03). Root cause: insecure password storage combined with an external...

evalSMSI 2.1.3多个远程安全漏洞

BUGTRAQ ID: 38116 evalSMSI是用PHP/MySQL开发的WEB应用，用于评估信息安全管理系统。 evalsmsi中存在多个输入验证和明文口令等安全漏洞，远程攻击者可以利用这些漏洞获得非授权访问或执行SQL注入、跨站脚本等攻击。 1 - 不安全口令存储 数据库中以明文存储了口令： table : authentification column: password 2 - 绕过认证 用户可通过ajax.php提交某些请求，这样就无需认证便获得了对应用的访问。 3 - SQL注入 可通过向ajax.php脚本提交恶意参数请求执行跨站脚本攻击。以下是有漏洞的代码段： $i...

Evalsmsi 2.1.03 SQL Injection / Bypass / Cross Site Scripting

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

evalSMSI 2.1.3 - Multiple Input Validation Vulnerabilities

evalSMSI 2.1.3 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/38116/info evalSMSI is prone to multiple vulnerabilities, including an authentication-bypass issue, an SQL-Injection issue, and an HTML-Injection issue. Attackers can exploit these issues to gain...

evalSMSI 2.1.3 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/38116/info evalSMSI is prone to multiple vulnerabilities, including an authentication-bypass issue, an SQL-Injection issue, and an HTML-Injection issue. Attackers can exploit these issues to gain administrative access to the affected application, execute...