CVE-2021-27234: SQL Injection
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-27234?
CVE-2021-27234 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2021-27234?
To fix CVE-2021-27234, update the Mutare Voice application to version 3.3.8 or later.
Which components are affected by CVE-2021-27234?
CVE-2021-27234 affects multiple components including Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp.
What impact can CVE-2021-27234 have on an organization?
CVE-2021-27234 can lead to unauthorized access to database content through SQL injection, potentially compromising sensitive information.
Is there a workaround for CVE-2021-27234 before patching?
A workaround for CVE-2021-27234 may involve restricting access to the vulnerable scripts or implementing input validation until an update can be applied.