Description
evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability.
References
- 38478 third-party-advisory
- 38116 vdb-entry
- http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt
- http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/
- 62180 vdb-entry
- 20100204 CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 mailing-list