| शीर्षक | ESAFENET ESAFENET CDG V5 SQL Injection |
|---|
| विवरण | There is an injection vulnerability in the id parameter of the Catelogs interface.
This vulnerability allows attackers to manipulate the application’s database through specially crafted SQL query strings. Due to insufficient verification of user input, attackers can insert malicious SQL code into input fields, thereby bypassing authentication, accessing or modifying sensitive data in the database, and even performing database management operations |
|---|
| स्रोत | ⚠️ https://flowus.cn/share/38f64855-27ec-4170-ac78-f29ca595901e?code=G8A6P3 |
|---|
| उपयोगकर्ता | 0menc (UID 75423) |
|---|
| सबमिशन | 27/09/2024 04:08 AM (2 साल पहले) |
|---|
| संयम | 06/10/2024 12:03 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 279368 [ESAFENET CDG V5 Catelogs;logindojojs?command=DelCatelogs delCatelogs पहचान SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|