ESAFENET CDG SQL Injection Vulnerability in sdDoneDetail.jsp

Vulnerability

A critical SQL injection vulnerability has been identified in ESAFENET CDG version 5. The issue arises from the handling of the flowId argument in the sdDoneDetail.jsp file, allowing for remote exploitation. This vulnerability has been publicly disclosed.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries and potentially access or modify sensitive data.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
4.6
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.