ESAFENET CDG
0 remedies
cpe:2.3:a:esafenet:cdg:*:*:*:*:*:*:*
0 remedies
- 5.6.3.154.205_20250114
ESAFENET CDG SQL Injection Vulnerability
Vulnerability
A critical SQL injection vulnerability has been identified in ESAFENET CDG version 5.6.3.154.205_20250114. The issue arises in the file '/parameter/getLimitIPList.jsp', where the 'noticeId' argument can be manipulated to execute unauthorized SQL commands. This vulnerability can be exploited remotely, and details of the exploit have been disclosed publicly.
Impact
Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized data access or manipulation in the application's database.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
6.0remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.