CVE-2010-0614

SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.20% chance of exploitation in the next 30 days, 66th percentile

Published

2010-02-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33602

References

• CVE Record
• NVD entry

Related

• CVE-2010-0611
• CVE-2010-0619
• CVE-2010-0610
• CVE-2010-0620
• CVE-2010-0608
• CVE-2010-0629