CVE-2024-10135

The CVE-2024-10135 issue affects ESAFENET CDG 5, specifically the NetSecConfigService.java function actionDelNetSecConfig. The root cause is improper handling/manipulation of the id argument, leading to an SQL injection vulnerability. The vulnerability is exploitable remotely and has public explo...

CVE-2024-10135 ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

PT-2024-16054 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue was found in the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to SQL injection. It is possible...