Nuance Winscribe Dictation SQL Injection Vulnerability

Nuance Winscribe Dictation is an automated workflow solution from Nuance. Create and share high-quality documents and simplify complex workflows in a more efficient and flexible way. Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection. The vulnerability stems from the fact that the login form of exporter/Login.aspx in the software Exporter is not validated and can be exploited by a remote, unauthenticated attacker to read the database via the txtPassword parameter .