Emuse Eservices / Envoice Project

emuse_-_eservices_/_envoice_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Emuse Eservices / Envoice

emuse_-_eservices_/_envoice

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-36723 1Emuse Eservices / Envoice Project 1Emuse Eservices / Envoice Jun 17, 2026 Dec 29, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.
CVE-2021-36722 1Emuse Eservices / Envoice Project 1Emuse Eservices / Envoice Jun 17, 2026 Dec 29, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generatio...Show more Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx code and the webroot location , information an attacker can leverage to further compromise the host.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-36723

1Emuse Eservices / Envoice Project

1Emuse Eservices / Envoice

Jun 17, 2026

Dec 29, 2021

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.

CVE-2021-36722

1Emuse Eservices / Envoice Project

1Emuse Eservices / Envoice

Jun 17, 2026

Dec 29, 2021

N/A· v4

9.8 CRITICAL· v3

10.0 HIGH· v2

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx code and the webroot location , information an attacker can leverage to further compromise the host.Show less