CVE-2024-9536 ESAFENET CDG MultiServerBackService sql injection

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /MultiServerBackService?path=1. The manipulation of the argument fileId leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2024-9536

CVE-2024-9536 concerns ESAFENET CDG V5. Affected component: the backend endpoint /MultiServerBackService?path=1, where the fileId argument is injectable. Root cause: unsafeguarded SQL construction allows SQL injection, reported as exploitable remotely. Observed impact: potential unauthorized data...

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A SQL injection vulnerability exists in ESAFENET CDG V5, which originates from the fileId parameter of file/MultiServerBackService?path=1 that can lead to SQL injection...

PT-2024-39682 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue affects an unknown functionality of the file /MultiServerBackService?path=1. The manipulation of the fileId argument leads to SQL injection. The attack may be launched remotely. The exploit has be...

CVE-2024-46510

ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface...

CVE-2024-46510

ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface...

PT-2024-32018 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A SQL injection issue was discovered in the NavigationAjax interface via the id parameter. This could potentially lead to unauthorized access and data theft. There is no information provided about the...

CVE-2024-46510

CVE-2024-46510 affects ESAFENET CDG v5. The NavigationAjax interface’s id parameter is vulnerable to SQL injection, as stated across multiple connected sources. Root cause: inadequate input validation on the id parameter allows SQL injection. Impact per CVSS: high confidentiality impact, low inte...

CVE-2024-46510

ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface...

CVE-2024-46510

ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which is caused by a SQL injection vulnerability in the id parameter of the NavigationAjax interface...

CVE-2024-42885

SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...

PT-2024-30191 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG versions 5.6 and earlier Description: A SQL Injection flaw exists in ESAFENET CDG, allowing an attacker to execute arbitrary code via the id parameter of the "data.jsp" page. Recommendations: For ESAFENET CDG versions 5.6 and...

CVE-2024-42885

CVE-2024-42885 concerns a SQL injection in ESAFENET CDG (v5.6 and earlier) that allows an attacker to execute arbitrary code via the id parameter on the data.jsp page. Affected product: ESAFENET CDG up to version 5.6. Root cause: improper handling of input used in SQL queries on data.jsp. Impact:...

CVE-2024-42885

SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG 5.6 and earlier versions, which stems from a SQL injection vulnerability that allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...

CVE-2024-42885

SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...

ESAFENET CDG 安全漏洞

ESAFENET CDG is a document security management system. A security vulnerability exists in ESAFENET CDG-Server-V5.6.2.126.139 and earlier versions, which stems from a SQL injection vulnerability in the permissionId parameter in CDGTempPermissions...

Carderbee Attacks: Hong Kong Organizations Targeted via Malicious Software Updates

A previously undocumented threat cluster has been linked to a software supply chain attack targeting organizations primarily located in Hong Kong and other regions in Asia. The Symantec Threat Hunter Team, part of Broadcom, is tracking the activity under its insect-themed moniker Carderbee. The...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...