Pimcore vulnerable to disclosure of system and database information behind /admin firewall

Summary Navigating to /admin/index/statistics with a logged in Pimcore user not an XmlHttpRequest because of this check: IndexController:125 exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the system...

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/editfirewall.php file...

PT-2024-23635 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/edit fire wall.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...