514 matches found
CVE-2024-30861
The netentsec NS-ASG application security gateway, specifically version 6.3 , is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability can be exploited via the /admin/configguide/ipsec_guide_1.php API endpoint. As a temporary work...
CVE-2024-30867
The application security gateway netentsec NS-ASG version 6.3 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability can be exploited via the /admin/edit_virtual_site_info.php API endpoint. While no patch is currently available...
CVE-2024-30870
The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection via the /admin/address_interpret.php API endpoint. This vulnerability allows for the improper neutralization of special elements used in an SQL command. While no specific patch version or real-world exploitation ...
CVE-2024-30866
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...
CVE-2024-30868
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...
PT-2024-23636 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...
CVE-2024-30867: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...
CVE-2024-30860: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...
CVE-2024-30868: Improper Control of Generation of Code
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...
CVE-2024-30870
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
CVE-2024-30862: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...
CVE-2024-30863
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
CVE-2024-30868
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/addressinterpret.php file...
CVE-2024-30858
netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability. The flaw is located in the /admin/edit_fire_wall.php file (or API endpoint). This vulnerability could allow an attacker to execute unauthorized SQL commands. As a remediation, it is recommended to restrict access to the...
CVE-2024-30863
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php...
CVE-2024-30872
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...