GCVE - cpe:2.3:a:myshell:evalsmsi:2.1.03:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:myshell:evalsmsi:2.1.03:*:*:*:*:*:*:*

part: a version: 2.1.03 update: *

Vendor	Myshell (`8bbfbfb7-f8dd-5560-b2b2-c859575b42af`)
Product	Evalsmsi (`d8ab8358-7cd3-5855-8fc7-42421f23826c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0617`	vulnerable	2026-06-08 04:52:03.578351	Details available Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the return parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2010-02-11T17:00:00.000Z Updated: 2024-08-07T00:52:19.547Z Open on db.gcve.eu Reference links http://www.osvdb.org/62179 http://secunia.com/advisories/38478 https://exchange.xforce.ibmcloud.com/vulnerabilities/56157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0616`	vulnerable	2026-06-08 04:52:03.578041	Details available evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability. Published: 2010-02-11T17:00:00.000Z Updated: 2024-08-07T00:52:19.541Z Open on db.gcve.eu Reference links http://secunia.com/advisories/38478 http://www.securityfocus.com/bid/38116 http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ http://www.osvdb.org/62180	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0615`	vulnerable	2026-06-08 04:52:03.577700	Details available Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the reports comment box in a continue_assess action. NOTE: some of these details are obtained from third party information. Published: 2010-02-11T17:00:00.000Z Updated: 2024-08-07T00:52:19.573Z Open on db.gcve.eu Reference links http://www.osvdb.org/62178 https://exchange.xforce.ibmcloud.com/vulnerabilities/56154 http://secunia.com/advisories/38478 http://www.securityfocus.com/bid/38116 http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0614`	vulnerable	2026-06-08 04:52:03.577246	Details available SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions. Published: 2010-02-11T17:00:00.000Z Updated: 2024-08-07T00:52:19.908Z Open on db.gcve.eu Reference links http://www.osvdb.org/62177 http://secunia.com/advisories/38478 http://www.securityfocus.com/bid/38116 http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/56152	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Evalsmsi

Notes

PURL mappings

Vulnerability references

Contribute