Vulnerability Details : CVE-2016-2555
Public exploit exists!
SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.
Vulnerability category: Sql Injection
Products affected by CVE-2016-2555
- cpe:2.3:a:atutor:atutor:2.2.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-2555
83.37%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2016-2555
-
ATutor 2.2.1 SQL Injection / Remote Code Execution
Disclosure Date: 2016-03-01First seen: 2020-04-26exploit/multi/http/atutor_sqliThis module exploits a SQL Injection vulnerability and an authentication weakness vulnerability in ATutor. This essentially means an attacker can bypass authentication and reach the administrator's interface where they can upload malicious code. Authors: - mr_me
CVSS scores for CVE-2016-2555
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2016-2555
-
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-2555
-
http://www.rapid7.com/db/modules/exploit/multi/http/atutor_sqli
ATutor 2.2.1 SQL Injection / Remote Code ExecutionThird Party Advisory;VDB Entry
-
https://github.com/atutor/ATutor/commit/629b2c992447f7670a2fecc484abfad8c4c2d298
Merge pull request #106 from net-ninja/patch-1 · atutor/ATutor@629b2c9 · GitHubPatch;Third Party Advisory
-
http://sourceincite.com/research/src-2016-08/
Nero Amazon Src 27054402 Antinfortunistiche schwarz Scarpe S1 402 Safety Uomo Santos 43 Neri Sir Top Metal wqCgxf1Exploit;Third Party Advisory
-
https://github.com/atutor/ATutor/commit/945a9dca01def8536516088da30fe6a4b7e9fa85
Update mysql_connect.inc.php · atutor/ATutor@945a9dc · GitHubPatch;Third Party Advisory
-
https://www.exploit-db.com/exploits/39514/
ATutor 2.2.1 - SQL Injection / Remote Code Execution (Metasploit)
Jump to