CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. Its EPSS score suggests a 12.2% probability of exploitation in the next 30 days. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-25899
Severity
HIGH
CVSS
7.5
EPSS
12.25%
Original NVD Description
An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated attacker can send a crafted HTTP request to perform a blind time-based SQL Injection. The vulnerable parameter is param1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)