Gửi #504385: esafenet CDG V5.6.3.154.205_20250114 RCEthông tin

tiêu đềesafenet CDG V5.6.3.154.205_20250114 RCE
Mô tảUnauthenticated SQLI Leading to Remote Code Execution (RCE) A SQL injection vulnerability was discovered in the `ClientSortLog.jsp` endpoint, specifically in the `endDate` parameter. This vulnerability allows an unauthenticated attacker to execute arbitrary code on the MSSQL server, potentially gaining full control over the server.
Nguồn⚠️ https://github.com/Rain1er/report/blob/main/CDG/Q2xpZW50U29ydExvZy5qc3A%3D.md
Người dùng
 mike111 (UID 81276)
Đệ trình20/02/2025 13:24 (cách đây 2 những năm)
Kiểm duyệt02/03/2025 16:28 (10 days later)
Trạng tháiđược chấp nhận
Mục VulDB298107 [ESAFENET CDG 5.6.3.154.205 ClientSortLog.jsp startDate/endDate Tiêm SQL]
điểm18

◂ TrướcTổng QuanTiếp theo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!