RSS   Vulnerabilities for 'Voice'   RSS

2021-02-16
 
CVE-2021-27236

CWE-94
 

 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.

 
 
CVE-2021-27235

NVD-CWE-noinfo
 

 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database.

 
 
CVE-2021-27234

CWE-89
 

 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp.

 
 
CVE-2021-27233

CWE-312
 

 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, password information for external systems is visible in cleartext. The Settings.asp page is affected by this issue.

 

 >>> Vendor: Mutare 2 Products
Voice
EVM


Copyright 2024, cxsecurity.com

 

Back to Top