Nuance Winscribe Dictation SQL Injection (CVE-2021-37599)

An SQL injection vulnerability exists in Nuance Winscribe Dictation. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-37599

The CVE-2021-37599 entry concerns Nuance Winscribe Dictation Exporter, specifically the Exporter/Login.aspx login form. The vulnerability is a SQL injection in the txtPassword parameter, affecting Winscribe Dictation 4.1.0.99, which could allow a remote, unauthenticated attacker to read the datab...