CVE-2024-35563

CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPermissions...

PT-2024-26549 · Unknown · Cdg-Server

Name of the Vulnerable Software and Affected Versions: CDG-Server versions 5.6.2.126.139 and earlier Description: A SQL injection issue was found via the permissionId parameter in CDGTempPermissions. This allows for potential exploitation. No information is provided about the estimated number of...

ESAFENET CDG 安全漏洞

ESAFENET CDG is a document security management system. A security vulnerability exists in ESAFENET CDG-Server-V5.6.2.126.139 and earlier versions, which stems from a SQL injection vulnerability in the permissionId parameter in CDGTempPermissions...

ProcessMaker Privilege Escalation Exploit

Exploit Title: ProcessMaker - User Profile Privilege Escalation Description: ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators. Exploit Author: Sornram Kampeera...