CVE-2021-25899

Name of the Vulnerable Software and Affected Versions Void Aural Rec Monitor version 9.0.0.1

Description An issue was discovered in svc-login.php, allowing an unauthenticated attacker to send a crafted HTTP request and perform a blind time-based SQL Injection. The vulnerable parameter is param1.

Recommendations For Void Aural Rec Monitor version 9.0.0.1, consider restricting access to the svc-login.php file until a patch is available. As a temporary workaround, avoid using the param1 parameter in the affected HTTP request to minimize the risk of exploitation.