Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2025/03/31 4:31 p.m.•44 views

CVE-2025-3003 ESAFENET CDG UserAjax sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS0.00328EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/31 4:31 p.m.•87 views

CVE-2025-3003

ESAFENET CDG 3 is affected by a SQL injection vulnerability in an unknown function of the file /CDGServer3/UserAjax, caused by manipulation of the Username parameter. The vulnerability can be exploited remotely; disclosures exist and public exploitation is possible. All sources consistently descr...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/03/31 4:31 p.m.•20 views

CVE-2025-3003 ESAFENET CDG UserAjax sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS7.2AI score0.00328EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•6 views

CVE-2025-3003: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS6.4AI score0.00328EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•7 views

PT-2025-13804

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 3 Description A critical issue was found in the software, affecting an unknown function of the file /CDGServer3/UserAjax. The manipulation of the Username argument leads to SQL injection. It is possible to launch the attac...

6.5CVSS0.00328EPSS
SaveExploits0References9
CNVD
CNVD
•added 2016/04/06 12:00 a.m.•19 views

DotCMS SQL Injection Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in DotCMS version 3.3, which originates from the...

6.5CVSS9.8AI score0.0158EPSS
SaveExploits2References1
Rows per page
Query Builder