CVE-2025-3003 ESAFENET CDG UserAjax sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-3003

ESAFENET CDG 3 is affected by a SQL injection vulnerability in an unknown function of the file /CDGServer3/UserAjax, caused by manipulation of the Username parameter. The vulnerability can be exploited remotely; disclosures exist and public exploitation is possible. All sources consistently descr...