ESAFENET CDG V5 Cross-Site Scripting Vulnerability in SysConfig.jsp

A cross-site scripting (XSS) vulnerability has been identified in ESAFENET CDG version 5. The issue arises in the SysConfig.jsp file, where the help parameter can be manipulated to execute malicious scripts in the user's browser. This vulnerability could lead to information theft or other malicious activities.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can execute scripts in the context of the user's browser session.

Reproduction

To reproduce this vulnerability, send a request to the SysConfig.jsp file with a crafted help parameter that includes the malicious script. This can be done manually or using an automated tool that targets cross-site scripting vulnerabilities.