Rain1Er

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG version 5.6.3.154.205 **Description** A critical vulnerability has been found in ESAFENET CDG, affecting an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the `startDate` and `endDate` arguments leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider restricting access to the `/CDGServer3/logManagement/ClientSortLog.jsp` file until a patch is available. Avoid using the `startDate` and `endDate` arguments in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG version 5.6.3.154.205 **Description** A critical issue affects some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the `flowId` argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider restricting access to the `/CDGServer3/workflowE/useractivate/updateorg.jsp` file until a patch is available. Avoid using the `flowId` argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** hzmanyun Education and Training System version 3.1.1 **Description** A critical vulnerability was found in the hzmanyun Education and Training System. The issue affects the `pdf2swf` function of the file `/pdf2swf`. The manipulation of the `file` argument leads to os command injection. This attack can be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider disabling the `pdf2swf` function of the file `/pdf2swf` until a patch is available. Restrict access to the `/pdf2swf` file to minimize the risk of exploitation. Avoid using the `file` argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Lumsoft ERP version 8 **Description** A critical issue has been found in Lumsoft ERP 8, affecting some unknown functionality of the file "/Api/TinyMce/UploadAjaxAPI.ashx" of the component ASPX File Handler. The manipulation of the `file` argument leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For Lumsoft ERP version 8, as a temporary workaround, consider disabling the "/Api/TinyMce/UploadAjaxAPI.ashx" file or restricting access to it until a patch is available. Avoid using the `file` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** hzmanyun Education and Training System version 3.1.1 **Description** A critical issue exists in the `saveImage` function of hzmanyun Education and Training System. Manipulation of the argument file allows for unrestricted file uploads, and the attack can be initiated remotely. The exploit for this issue has been publicly disclosed. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG V5 **Description** A critical issue was found in an unknown function of the file /sdTodoDetail.jsp, where the manipulation of the `flowId` argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond. **Recommendations** ESAFENET CDG V5: Update the /sdTodoDetail.jsp file to properly sanitize the `flowId` argument to prevent SQL injection attacks. Ensure that all user input is validated and escaped to prevent malicious SQL code execution. Apply security patches or updates provided by the vendor, if available, to fix the issue.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG version V5 **Description** A critical issue has been found in an unknown functionality of the file "/todoDetail.jsp". The manipulation of the `flowId` argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond. **Recommendations** ESAFENET CDG version V5: Update the "/todoDetail.jsp" file to properly sanitize the `flowId` argument and prevent SQL injection attacks. Ensure that all user input is validated and escaped to prevent malicious SQL code execution.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG V5 **Description** A vulnerability was found in an unknown functionality of the file /appDetail.jsp. The manipulation of the `curpage` argument leads to cross site scripting. The attack can be launched remotely. The vendor was contacted about this disclosure but did not respond. **Recommendations** For ESAFENET CDG V5, as a temporary workaround, consider restricting access to the /appDetail.jsp file until a patch is available. Avoid manipulating the `curpage` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG V5 **Description** A critical issue has been found in ESAFENET CDG V5, affecting some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the `flowId` argument leads to SQL injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** ESAFENET CDG V5: Update the /sdDoneDetail.jsp file to properly sanitize the `flowId` argument to prevent SQL injection. Ensure that all user input is validated and escaped to prevent malicious data from being executed. Apply security patches or updates provided by the vendor, if available, to address the critical issue.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG V5 **Description** A problematic issue was found in ESAFENET CDG V5, affecting unknown code of the file "doneDetail.jsp". The manipulation of the `curpage` argument leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond. **Recommendations** ESAFENET CDG V5: Update the /doneDetail.jsp file to properly validate and sanitize the `curpage` argument to prevent cross site scripting attacks.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG V5 **Description** A critical vulnerability has been found in ESAFENET CDG V5, affecting an unknown part of the file /doneDetail.jsp. The manipulation of the `flowId` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For ESAFENET CDG V5, as a temporary workaround, consider restricting access to the `/doneDetail.jsp` file or disabling the manipulation of the `flowId` argument until a patch is available. Avoid using the `flowId` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG V5 **Description** A critical issue affects some unknown functionality of the file /content top.jsp. The manipulation of the `id` argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For ESAFENET CDG V5, as a temporary workaround, consider restricting access to the /content top.jsp file until a patch is available. Avoid using the `id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ESAFENET CDG V5 **Description** A critical issue has been found in ESAFENET CDG V5, affecting an unknown function of the file /appDetail.jsp. The manipulation of the `flowId` argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For ESAFENET CDG V5, as a temporary workaround, consider restricting access to the `/appDetail.jsp` file until a patch is available. Avoid using the `flowId` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.