| Package | Affected versions | Patched versions |
|---|---|---|
| evalsmsi | = 2.1.03 |
evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free