| Titolo | esafenet CDG V5.6.3.154.205_20250114 RCE |
|---|
| Descrizione | A SQL injection vulnerability was discovered in the UnChkMailApplication.jsp endpoint, specifically in the typename parameter. This vulnerability allows an unauthenticated attacker to execute arbitrary code on the MSSQL server, potentially gaining full control over the server. |
|---|
| Fonte | ⚠️ https://github.com/Rain1er/report/blob/main/CDG/NA%3D%3D.md |
|---|
| Utente | XU NIE (UID 82414) |
|---|
| Sottomissione | 24/03/2025 03:47 (1 Anno fa) |
|---|
| Moderazione | 07/04/2025 12:10 (14 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 303645 [ESAFENET CDG 5.6.3.154.205_20250114 UnChkMailApplication.jsp typename iniezione SQL] |
|---|
| Punti | 17 |
|---|