Description (CNA)
The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database (and execute code in some situations) via the txtPassword parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://slazarus.xyz/winscribe.html
- https://www.nuance.com/dragon/business-solutions/winscribe-dictation-workflow.html
ADP enrichment
No English description supplied.