CVE-2025-0787 ESAFENET CDG appDetail.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be launched remotely. The exploit has be...

CVE-2025-0786 ESAFENET CDG appDetail.jsp sql injection

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2025-0786 ESAFENET CDG appDetail.jsp sql injection

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2025-0786

CVE-2025-0786 affects ESAFENET CDG V5. The vulnerability resides in the /appDetail.jsp function (parameter flowId) and leads to SQL injection. Exploitation is possible remotely, with public disclosure and no confirmed vendor remediation in the provided documents. Multiple sources corroborate the ...

CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-0785

Summary: CVE-2025-0785 affects ESAFENET CDG V5, specifically the /SysConfig.jsp file where the user-supplied parameter likely named “help” can be manipulated to trigger cross-site scripting (XSS). The root cause is improper sanitization/handling of the argument, enabling an attacker to inject exe...

CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter id of the file /contenttop.jsp that can lead to SQL injection...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from China EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter curpage in the file /appDetail.jsp that can lead to cross-site scripting...

PT-2025-4046 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting an unknown function of the file /appDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to launch the attack...

PT-2025-4047 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A vulnerability was found in an unknown functionality of the file /appDetail.jsp. The manipulation of the curpage argument leads to cross site scripting. The attack can be launched remotely. The vendor was contact...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /doneDetail.jsp that can lead to SQL injection...

PT-2025-4050 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A problematic issue was found in ESAFENET CDG V5, affecting unknown code of the file "doneDetail.jsp". The manipulation of the curpage argument leads to cross site scripting. The attack can be initiated remotely...

PT-2025-4048 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue affects some unknown functionality of the file /content top.jsp. The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to...

EsafeNet CDG 代码注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A code injection vulnerability exists in EsafeNet CDG version V5, which originates from the parameter help in the file /SysConfig.jsp that can lead to cross-site scripting...

PT-2025-4045 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A vulnerability was found in ESAFENET CDG V5, classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross-site...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /appDetail.jsp that can lead to SQL injection...

PT-2025-4051 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. The attack may be initiated...

PT-2025-4049 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical vulnerability has been found in ESAFENET CDG V5, affecting an unknown part of the file /doneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to initiate the...

CVE-2024-10660

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to initiate the attack remotely. The explo...