CVE-2025-1158

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in ESAFENET CDG 5.6.3.154.205_20250114. It has been classified as critical. Affected is an unknown function of the file addPolicyToSafetyGroup.jsp. The manipulation of the argument safetyGroupId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Feb 10, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-115805.3A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes miss CVE-2025-115817.5A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of t CVE-2025-115829.8A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registra CVE-2025-115839.8A flaw has been found in code-projects Online Job Search Engine 1.0. Impacted is an unknown function of the file /postjob.php. Executing man CVE-2025-115849.8A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searc CVE-2025-115859.8A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.CVE-2025-115869.8A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulati CVE-2025-115874.3The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due CVE-2025-115888.8A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Suc CVE-2025-115898.8A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.CVE-2025-11595.4A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability i CVE-2025-115908.8A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the fil