Soumettre #431325: ESAFENET CDG V5 SQL Injection
| Titre | ESAFENET CDG V5 SQL Injection |
|---|---|
| Description | ESAFENET CDG V5 PolicyAction interface has an SQL injection vulnerability in the id.There is an injection vulnerability in the delPolicyAction function. Attackers can dump the database. |
| La source | ⚠️ https:/ |
| Utilisateur | 0menc (UID 75423) |
| Soumission | 25/10/2024 10:41 (il y a 2 ans) |
| Modérer | 31/10/2024 16:16 (6 days later) |
| Statut | Accepté |
| Entrée VulDB | 282609 [ESAFENET CDG 5 PolicyActionService.java delPolicyAction ID injection SQL] |
| Points | 15 |