Sql injection

2023-12-1723:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

netentsec ns-asg

sql injection

remote attack

disclosure

nvd

vdb-248265

critical impact

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.5%

JSON

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file /admin/singlelogin.php?submit=1. The manipulation of the argument loginId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248265 was assigned to this vulnerability.

CPENameOperatorVersion
application_security_gatewayeq6.3.1

CPE	Name	Operator	Version
	application_security_gateway	eq	6.3.1

References

github.com/willchen0011/cve/blob/main/NS-ASG-sql.md

vuldb.com/?ctiid.248265

vuldb.com/?id.248265