CVE-2024-10501

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of the file /com/esafenet/servlet/document/ExamCDGDocService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10501

The CVE-2024-10501 entry concerns ESAFENET CDG 5. The vulnerability is in ExamCDGDocService.java, findById, where manipulation of the id parameter enables SQL injection. A remote attacker could trigger the issue, and public disclosures exist. Connected documents consistently describe the affected...

PT-2024-16322

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 5 Description A critical issue was found in ESAFENET CDG, affecting the findById function of the file /com/esafenet/servlet/document/ExamCDGDocService.java. The manipulation of the id argument leads to SQL injection. It is...

CVE-2024-10501: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of the file /com/esafenet/servlet/document/ExamCDGDocService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...