CVE-2024-30860: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...

CVE-2024-30860

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...

CVE-2024-30860

The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability is accessible via the /admin/export_excel_user.php API endpoint. Exploitation could allow an attacker to perform unaut...