CVE-2025-0792

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-0790

A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-0791

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2025-0790

A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-0791

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2025-0792

ESAFENET CDG V5 is affected by a SQL injection vulnerability in the /sdTodoDetail.jsp file, triggered by manipulating the flowId parameter. The issue is exploitable remotely and has public disclosure. Multiple sources confirm the vulnerability but do not provide vendor response or an official pat...

PT-2025-4055 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A problem was found in ESAFENET CDG, affecting an unknown part of the file /todolistjump.jsp. The manipulation of the flowId argument leads to cross-site scripting. It is possible to initiate the attack...

PT-2025-4052 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue was found in an unknown function of the file /sdTodoDetail.jsp, where the manipulation of the flowId argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-0790

The CVE-2025-0790 entry affects ESAFENET CDG V5, specifically the file /doneDetail.jsp. The vulnerability arises from unsanitized or manipulated the curpage parameter, enabling cross-site scripting. Exploitation is possible remotely, and public disclosures exist. Multiple sources (NVD, Red Hat, C...

CVE-2025-0789

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2025-0789

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2025-0788

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /contenttop.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-0789

The CVE-2025-0789 entry concerns ESAFENET CDG V5. A vulnerability in the file /doneDetail.jsp arises from manipulating the flowId parameter, enabling SQL injection. Impact is described as remote exploitation with high severity; exploitation details have been disclosed publicly. Workarounds includ...

CVE-2025-0788

CVE-2025-0788 affects ESAFENET CDG V5. The vulnerability is an SQL injection in the /content_top.jsp file, caused by manipulation of the id parameter. It can be exploited remotely, and public exploitation information exists. Multiple sources confirm the issue without clear vendor mitigation or re...

CVE-2025-0786

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2025-0785

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-0787

A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be launched remotely. The exploit has be...

CVE-2025-0787

A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be launched remotely. The exploit has be...

CVE-2025-0787

CVE-2025-0787 affects ESAFENET CDG V5, specifically the /appDetail.jsp component. The vulnerability arises from manipulating the parameter, enabling cross-site scripting. Public exploitation is reported; the attack can be launched remotely and requires user interaction. No vendor patch details a...

CVE-2025-0786

CVE-2025-0786 affects ESAFENET CDG V5. The vulnerability resides in the /appDetail.jsp function (parameter flowId) and leads to SQL injection. Exploitation is possible remotely, with public disclosure and no confirmed vendor remediation in the provided documents. Multiple sources corroborate the ...