Mutare : Security Vulnerabilities, CVEs,
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.
Max CVSS
9.8
EPSS Score
0.62%
Published
2021-02-16
Updated
2022-05-03
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database.
Max CVSS
4.9
EPSS Score
0.07%
Published
2021-02-16
Updated
2021-02-22
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp.
Max CVSS
9.8
EPSS Score
0.14%
Published
2021-02-16
Updated
2021-02-22
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, password information for external systems is visible in cleartext. The Settings.asp page is affected by this issue.
Max CVSS
4.9
EPSS Score
0.07%
Published
2021-02-16
Updated
2021-02-22
Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via (1) a delivery address and possibly (2) a PIN.
Max CVSS
4.3
EPSS Score
0.16%
Published
2011-02-28
Updated
2017-08-17
Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that (1) change a PIN, (2) delete messages, (3) add a delivery address, or (4) change a delivery address.
Max CVSS
6.8
EPSS Score
0.10%
Published
2011-02-28
Updated
2011-03-01
6 vulnerabilities found