CVEvulnerability
CVE-2010-0614
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions.
Affected configurations
• myshell evalsmsi 2.1.03
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt Exploit
- http://secunia.com/advisories/38478 Vendor Advisory
- http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ www.corelan.be:8800
- http://www.osvdb.org/62177 www.osvdb.org
- http://www.securityfocus.com/archive/1/509370/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/38116 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56152 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt Exploit
- http://secunia.com/advisories/38478 Vendor Advisory
- http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ www.corelan.be:8800
- http://www.osvdb.org/62177 www.osvdb.org
- http://www.securityfocus.com/archive/1/509370/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/38116 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56152 exchange.xforce.ibmcloud.com