CVE-2021-30461

CRITICO 9.8CVE-2021-30461 · Published 29/05/2021 · updated 17/06/2026

In breve

CVE-2021-30461 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda voipmonitor (voipmonitor).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 36.6%, superiore al 98.5% delle vulnerabilità.
Correzione: aggiornare a 24.61 o successiva.

Package	Affected versions	Patched versions
voipmonitor voipmonitor	`< 24.61`	`24.61`

Description

A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.

References

ssd-disclosure.com/ssd-advisory--voipmonitor-unauth-rce · Exploit

Altre vulnerabilità di voipmonitor

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free