CVE-2025-1841

CVE-2025-1841 affects ESAFENET CDG 5.6.3.154.205. The vulnerability is in the file /CDGServer3/logManagement/ClientSortLog.jsp, where manipulation of the parameters startDate/endDate causes a SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. The available c...

CVE-2025-1841 ESAFENET CDG ClientSortLog.jsp sql injection

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

EsafeNet DSM 安全漏洞

EsafeNet DSM is a system that provides fine-grained document usage rights control from China's EsafeNet. It is used for document rights control, data security protection and authorization management. A security vulnerability exists in EsafeNet DSM version 3.1.2, which originates from command...

CVE-2025-1844: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.20520250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet China. A security vulnerability exists in ESAFENET CDG version 5.6.3.154.20520250114, which originates from a SQL injection in the backupLogDetail.jsp file...

CVE-2025-1840: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...

CVE-2025-1845: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can be launched remotely. The exploit has...

PT-2025-9234

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 5.6.3.154.205 Description A critical vulnerability has been found in ESAFENET CDG, affecting an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the startDate and endDate arguments...

EsafeNet CDG 注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. An injection vulnerability exists in EsafeNet CDG version 5.6.3.154.205, which originates from improper handling of the startDate/endDate parameter in the /CDGServer3/logManagement/ClientSortLog.jsp file, resulting in SQL...

CVE-2025-1841: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-1840

CVE-2025-1840 affects ESAFENET CDG 5.6.3.154.205. The root cause is improper handling of the flowId parameter in the file /CDGServer3/workflowE/useractivate/updateorg.jsp, which leads to an SQL injection. The vulnerability can be exploited remotely and the exploit has been disclosed publicly, ind...

CVE-2025-1840 ESAFENET CDG updateorg.jsp sql injection

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...

CVE-2025-1840 ESAFENET CDG updateorg.jsp sql injection

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...

PT-2025-9233 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5.6.3.154.205 Description: A critical issue affects some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the flowId argument leads to SQL injection. The attack may b...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet, China. A security vulnerability exists in EsafeNet CDG version 5.6.3.154.205, which originates from improper handling of the flowId parameter in the /CDGServer3/workflowE/useractivate/updateorg.jsp file, resulting in SQL injecti...

PT-2025-9251

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 5.6.3.154.205 20250114 Description A critical vulnerability was found in the file /CDGServer3/logManagement/backupLogDetail.jsp, where the manipulation of the logTaskId argument leads to SQL injection. This issue can be...

PT-2025-9252

Name of the Vulnerable Software and Affected Versions ESAFENET DSM version 3.1.2 Description A critical issue has been discovered, affecting the examExportPDF function in the /admin/plan/examExportPDF file. The manipulation of the s argument leads to command injection. This issue can be exploited...

CVE-2025-1158

A vulnerability was found in ESAFENET CDG 5.6.3.154.20520250114. It has been classified as critical. Affected is an unknown function of the file addPolicyToSafetyGroup.jsp. The manipulation of the argument safetyGroupId leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-1158

A vulnerability was found in ESAFENET CDG 5.6.3.154.20520250114. It has been classified as critical. Affected is an unknown function of the file addPolicyToSafetyGroup.jsp. The manipulation of the argument safetyGroupId leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-1158 ESAFENET CDG addPolicyToSafetyGroup.jsp sql injection

A vulnerability was found in ESAFENET CDG 5.6.3.154.20520250114. It has been classified as critical. Affected is an unknown function of the file addPolicyToSafetyGroup.jsp. The manipulation of the argument safetyGroupId leads to sql injection. It is possible to launch the attack remotely. The...