exploitDog

CVE-2021-41408

Опубликовано: 17 июн. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter.

Ссылки

https://gist.github.com/divinepwner/e51050e0d7df77ff1f1379583e8cf7db
Exploit
Third Party Advisory
https://www.voipmonitor.org/changelog-gui?major=5
Release Notes
Vendor Advisory
https://gist.github.com/divinepwner/e51050e0d7df77ff1f1379583e8cf7db
Exploit
Third Party Advisory
https://www.voipmonitor.org/changelog-gui?major=5
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:voipmonitor:voipmonitor:24.61:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00732

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-xf92-6qp2-3hc7

CVSS3: 9.8

github

больше 3 лет назад

VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter.

EPSS

Процентиль: 72%

0.00732

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89