| 标题 | esafenet CDG V5.6.3.154.205_20250114 RCE |
|---|
| 描述 | A SQL injection vulnerability was discovered in the UnChkMailApplication.jsp endpoint, specifically in the typename parameter. This vulnerability allows an unauthenticated attacker to execute arbitrary code on the MSSQL server, potentially gaining full control over the server. |
|---|
| 来源 | ⚠️ https://github.com/Rain1er/report/blob/main/CDG/NA%3D%3D.md |
|---|
| 用户 | XU NIE (UID 82414) |
|---|
| 提交 | 2025-03-24 03時47分 (2 年前) |
|---|
| 管理 | 2025-04-07 12時10分 (14 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 303645 [ESAFENET CDG 5.6.3.154.205_20250114 UnChkMailApplication.jsp typename SQL注入] |
|---|
| 积分 | 17 |
|---|