CVE-2021-25899
45Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 12%
from disclosure to weapon
Published on NVDApr 23
VulnCheck+1004d
exploitation probability
12%top 4% of all CVEs
observed exploitation
yesVulnCheck
An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated attacker can send a crafted HTTP request to perform a blind time-based SQL Injection. The vulnerable parameter is param1.
Affected products
n/a · n/a