Submeter #525611: esafenet CDG V5.6.3.154.205_20250114 RCEinformação

Títuloesafenet CDG V5.6.3.154.205_20250114 RCE
DescriçãoA SQL injection vulnerability was discovered in the UnChkMailApplication.jsp endpoint, specifically in the typename parameter. This vulnerability allows an unauthenticated attacker to execute arbitrary code on the MSSQL server, potentially gaining full control over the server.
Fonte⚠️ https://github.com/Rain1er/report/blob/main/CDG/NA%3D%3D.md
Utilizador
 XU NIE (UID 82414)
Submissão24/03/2025 03h47 (há 1 Ano)
Moderação07/04/2025 12h10 (14 days later)
EstadoAceite
Entrada VulDB303645 [ESAFENET CDG 5.6.3.154.205_20250114 UnChkMailApplication.jsp typename Injeção SQL]
Pontos17

Want to know what is going to be exploited?

We predict KEV entries!