| عنوان | esafenet CDG V5 SQL Injection |
|---|
| الوصف | A vulnerability classified as critical has been discovered in esafenet's CDG v5 product.
The following code (doneDetail.jsp) contains an SQL injection vulnerability in the flowId parameter. An attacker can exploit this vulnerability to construct malicious SQL queries, potentially accessing or manipulating sensitive information in the database.
|
|---|
| المصدر | ⚠️ https://github.com/Rain1er/report/blob/main/CDG/doneDetail.md |
|---|
| المستخدم | raindrop (UID 80297) |
|---|
| ارسال | 16/01/2025 10:23 AM (2 سنوات منذ) |
|---|
| الاعتدال | 28/01/2025 03:34 PM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 293913 [ESAFENET CDG V5 /doneDetail.jsp flowId حقن SQL] |
|---|
| النقاط | 18 |
|---|