CVE-2024-10500

ESAFENET CDG 5 is affected by a SQL injection in the HookWhiteListService.java file, where manipulating the policyId argument enables remote exploitation. This vulnerability is corroborated across multiple sources (including PT-Security and CVE records) and is described as affecting unknown funct...

ESAFENET CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A SQL injection vulnerability exists in ESAFENET CDG version 5, which stems from an incorrect operation of the parameter policyId that can lead to SQL injection...

CVE-2024-10500: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService.java. The manipulation of the argument policyId leads to sql injection. The attack may be launche...

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG 5 suffers from a SQL injection vulnerability, which originates from a SQL injection vulnerability in the policyId parameter of the /com/esafenet/servlet/policy/PrintPolicyService.java page...

CVE-2024-10279: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The attack can be initiated remotely. The...

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG V5 version has a SQL injection vulnerability, which originates from the parameter policyId in the file /com/esafenet/policy/action/PolicyPushControlAction.java, which can lead to SQL injection...

PT-2024-16006

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 5 Description A critical vulnerability has been found in ESAFENET CDG, affecting the actionPolicyPush function of the file /com/esafenet/policy/action/PolicyPushControlAction.java. The manipulation of the policyId argument...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-976)

This update for java-170-openjdk fixes the following issues : - Update to 2.6.7 - OpenJDK 7u111 - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 - S8147771: Construction of static protection...