CVE-2024-10612

CVE-2024-10612 affects ESAFENET CDG 5, impacting the function removeHookInvalidCourse in /com/esafenet/servlet/system/HookInvalidCourseService.java. The vulnerability arises from improper handling of the id parameter, enabling SQL injection and potentially enabling remote attack. Public exploit d...

CVE-2024-10612: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function removeHookInvalidCourse of the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

PT-2024-16408 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been found in ESAFENET CDG, affecting the removeHookInvalidCourse function in the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the id argument...